IBM thinkpad t61 bios hacking

[dave11674]

hi guys

my t61 just went tits up
updated bios and now i get password prompt

ive read up and managed to dump the eeprom
loaded it into IBMtools 2.1 lite but not showing the passy
i can see some ascii text so i know its dumped ok
ive checked the lines where it says the password is kept
but its all jargon
so thinking it encrypted

any1 got any ideas or tools

thanks
dave

[Cyrusxxx]

I had simmilar problem.
This might help you.

  
Service Forum :: View topic - [Tutorial] How to unlock ThinkPad supervisor password

But be warned this can be dangerous.If you are not capable of doing this right dont try it.

[CuteLinux]

Try decode it with IBMpass if you get RF, it's TCPA locked, you will need a patched eeprom dump and a eeprom writer.
Good Luck

[yullah]

Try decode it with IBMpass if you get RF, it's TCPA locked, you will need a patched eeprom dump and a eeprom writer.
Good Luck

please where is the eeprom located on t61 board, and where can the software be downloaded?

[CuteLinux]

Lenovo T61 save the keypass in a P24S08 EEPROM Chip (24RF08 clone) .

Steps:
1) Dismantle the Laptop, the EEPROM Chip located on the MOBO
T61 EEPROM Location
T61 EEPROM Location closer

2) Use a serial interface Reader and the R24RF08 program
>> R24RF08 download

3 Read the eeprom dump password with IBMpass 2.1
>> IbmPass2.1 download

The interface Schema
>> i2cprog pdf download

Have a nice Hacking

[moldavanin]

ibmpass 2.1 don't work - password in eeprom is:
E3 D9 5E A8 F9 40 99 3E
it (programm) have not valid solution

[moldavanin]

for previous: I have T61P

[ass007]

I got T400, i managed to get hex dump from P24SO8 -- but turns out password in line 0x380 is encripted by some sort of TCPA circut. allservice.ro offers p24SO8 modified hex file, but they ask $55. I like to have some hex dump with unencripted passwords to reverse enginer it myown.

[ass007]

ibmpass 2.1 don't work - password in eeprom is:
E3 D9 5E A8 F9 40 99 3E
it (programm) have not valid solution

If i get example of unencripted password hex dump, i will definitely try to reverse enginere suitable eeprom hex for lenovo t400

[moldavanin]

Type message whith 388-38f data (like me) , I'll try decode
this string.

[deffc0n]

Who read 24RF08 UPA or diffrent programmer this eeprom ?

[mobitel]

ibmpass 2.1 don't work - password in eeprom is:
C1 C2 26 60 94 28 A6 15

[hugo000000]

Hello,
Just wondering if anyone have dump of BIOS for the X120E (X100E) my is in this moment bricked (lost of the power when flashing) so I need to u/p new BIOS.
thank you

[dave11674]

Hello,
Just wondering if anyone have dump of BIOS for the X120E (X100E) my is in this moment bricked (lost of the power when flashing) so I need to u/p new BIOS.
thank you

search on the laptop maker website for a bios image and flash that

worked for me in the past

dave

[hugo000000]

Hi Dave,
The image is for nothing for me, the Thinkpad is dead (as brick) so I can NOT load anything without start at lease little be
hugo