Hack of Sigllent spectrum analyzer ssa3021X?

[benishor]

Hi there,

Lurker here. Sorry to revive the thread. I am considering getting a SSA3021X Plus and I was wondering what is the current state of things? Is there still an upgrade door available for the SA? Also, is there a way to get a discount when buying from Europe?

Thank you!

[epsilon888]

Hi all. I have a SSA3021X with firmware version 2.1.1.1. I guess it's firmware for the Plus version, as there is options for touch screen but not a physcially touch screen. There is also an integrated webserver. I can't get any connection via LAN and Telnet. Now my question: Can I "upgrade" this scope to 3.2GHz? If so, how? Thanks in advance.

[ThomasM...]

... the script works great with FW: 1.3.9.6 for my SSA3021(NON+) which is now a fully modified SSA3021 all options permanet

Great Job

Thanks and regards from Munich 

[epsilon888]

Hi. Did you installed an older firmware than default in the instrument? If so, what was your default firmware? Thanks.

[ThomasM...]

Hi. Did you installed an older firmware than default in the instrument? If so, what was your default firmware? Thanks.

Hi, modification has been done with 1.3.9.6, which was updatet from initial version 1.3.9.5 @ delivery.
Finally after modification updated to 1.3.9.7


Regards
Thomas

[benishor]

Hi all,

I got a SSA3021X plus running the 3.2.2.5.0 firmware. Is there a way to increase the span to 3.2GHz? I looked through the forum posts but got lost in a lot of non plus messages.

Thank you!

[benishor]

Just wanted to confirm that I managed to unlock it (thanks @cubitus), so the upgrade path for brand new SSA3021X Plus with 3.2.2.5.0 is still there.

[epsilon888]

Hi. Can you tell us how you did it in more detail? Thanks.

[benishor]

I will quote the instructions I received which were good for me:

TELNET
 IP web browser of the SSA3021
- telnet to port 5024 (SCPI) and send the command 'DEBTTT' (this should start a telnet server on port 23)
- telnet to port 23 and log in as 'root', pw 'ding1234

at first ceca just allows you to have all the options #428

https://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/425/

to go further : #1620
https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg3563577/#msg3563577

[epsilon888]

  Thanks. I will try this method.

[nilswe]

Hi all,
Do you have to do something different as described in #1620 ? Did you flash it with the new SVA V3.2.2.5.0 or with the SVA 3.2.2.4.0 Firmware?
Did you deviate from something else?
I Also got a new SSA3021X Plus with the 3.2.2.5.0 FW installed.

Sorry, that I'm asking  I'm a little nervous   

Tanks 

[tv84]

Again for the latest version...

For those that have the v3.2.2.5.0 version, you can download the SVA1000X_V3.2.2.5.0 from Siglent site and do this patch using an hexeditor. After that, flash the firmware in your SSAX+ and you'll have a SVA.

PS: Combine this with previous instructions as it will only replace some parts.

[nilswe]

Thank you so much! 

[jhormilla]

Hi. Did you installed an older firmware than default in the instrument? If so, what was your default firmware? Thanks.

Hi, modification has been done with 1.3.9.6, which was updatet from initial version 1.3.9.5 @ delivery.
Finally after modification updated to 1.3.9.7


Regards
Thomas

Mine was at 1.3.9.8, dropped it down to 1.3.9.6 and was able to telnet on port 10101 with the file SSA3000X_telnet listed by tv84,
I didn't have to use a login or pw, when I tried it didn't recognize the commands, but it was displaying the Arago project logo and seem to be responding, I then typed in the following commands.

cd /   
cp -R /usr/bin/siglent/usr/backup /usr/bin/siglent/usr/mass_storage/U-disk0/SA-backup 
cp -R /usr/bin/siglent/firmdata0 /usr/bin/siglent/usr/mass_storage/U-disk0/SA-firmdata0
the progress bar on the SSA stopped at 60% so I waited about 20 minutes, I then pulled the USB out and re started the SSA, it was not bricked, then read the USB stick on the PC and the two files were in there. I tried the whole procedure again and this time after the two files were written to the USB stick by the SSA using SSA3000X_telnet I entered the following commands,

cd /   
mount -o remount,rw /dev/ubi2_0 /usr/bin/siglent/firmdata0
cd /usr/bin/siglent/firmdata0
mv NSP_sn_bandwidth.xml NSP_sn_bandwidthx.xml
cd /
cd /usr/bin/siglent/usr/backup
mv NSP_sn_bandwidth.xml NSP_sn_bandwidthx.xml
cd /
sync
exit

didn't get any errors but after re starting the SSA it turned on just fine but no upgrades. 

Any help would be appreciated.

[ThomasM...]

Hi. Did you installed an older firmware than default in the instrument? If so, what was your default firmware? Thanks.

Hi, modification has been done with 1.3.9.6, which was updatet from initial version 1.3.9.5 @ delivery.
Finally after modification updated to 1.3.9.7


Regards
Thomas

Mine was at 1.3.9.8, dropped it down to 1.3.9.6 and was able to telnet on port 10101 with the file SSA3000X_telnet listed by tv84,
I didn't have to use a login or pw, when I tried it didn't recognize the commands, but it was displaying the Arago project logo and seem to be responding, I then typed in the following commands.

cd /   
cp -R /usr/bin/siglent/usr/backup /usr/bin/siglent/usr/mass_storage/U-disk0/SA-backup 
cp -R /usr/bin/siglent/firmdata0 /usr/bin/siglent/usr/mass_storage/U-disk0/SA-firmdata0
the progress bar on the SSA stopped at 60% so I waited about 20 minutes, I then pulled the USB out and re started the SSA, it was not bricked, then read the USB stick on the PC and the two files were in there. I tried the whole procedure again and this time after the two files were written to the USB stick by the SSA using SSA3000X_telnet I entered the following commands,

cd /   
mount -o remount,rw /dev/ubi2_0 /usr/bin/siglent/firmdata0
cd /usr/bin/siglent/firmdata0
mv NSP_sn_bandwidth.xml NSP_sn_bandwidthx.xml
cd /
cd /usr/bin/siglent/usr/backup
mv NSP_sn_bandwidth.xml NSP_sn_bandwidthx.xml
cd /
sync
exit

didn't get any errors but after re starting the SSA it turned on just fine but no upgrades. 

Any help would be appreciated.

Root and PW is necessary

[jhormilla]

Got it figured out thanks to Thomas. It's running with 1.3.9.8 
Thank you for all the help guys,

[hafrse]

Hello,

is  it possible to patch a ssa3032X-R to be a ssa3075X-R  ? if so, where I can find the information ,  thanks

[tomud]

Someone asked about the EMCView software once, maybe the attachment will be useful to someone who has a spectrum analyzer with the serial number XXXX (and not only)

Edit by gnif: Attachment removed, we are not a cracking/warez site.

[Bicurico]

I don't consider it reasonable to publish a keygen for a software that is still in development and being sold.

Why harm this company? Should they rather close business and stop furher development?

[tomud]

I don't consider it reasonable to publish a keygen for a software that is still in development and being sold.

Why harm this company? Should they rather close business and stop furher development?

The company will buy such software because it needs support, a few amateurs hacking a Siglent device would never buy it and it would not hurt the software manufacturer (the company does not hack spectrum analyzers to have a serial number XXXXX). Hacking Siglent devices - theoretically, we also harm the device manufacturer. How is cracked software running on a spectrum analyzer different from software running on a PC ? (symptoms of hypocrisy ?)

Looking at it differently - an amateur electronics engineer who builds do-it-yourself constructions can get to know the software (as well as EMI / EMC issues) better, which may translate into purchasing software in the company he works for.

For example, at home I use hacked devices such as Siglent, Rigol etc. as well as such software (I have a limited budget for DIY), but in my company I already have legal versions of devices and software (The company earns more because I buy two devices, one cheaper for my home, the other more expensive for my business).

[RyanBoggs]

Hi all. I have a SSA3021X with firmware version 2.1.1.1. I guess it's firmware for the Plus version, as there is options for touch screen but not a physcially touch screen. There is also an integrated webserver. I can't get any connection via LAN and Telnet. Now my question: Can I "upgrade" this scope to 3.2GHz? If so, how? Thanks in advance.

I have the exact same issue.  Version 2.1.1.1 seems to be a version shipping with new units that isn't available publicly on Siglent's website. My unit seems to indicate that this firmware update was from October 11, 2021.

It won't seem to let me downgrade to a 1.x.x.x version either. No telnet connection for me, though I can get a ping.  I am wondering if Siglent is trying to permanently patch new units to be unhackable through the currently known means and is holding on to the new firmware to prevent people from messing around with it.

[RoV]

It won't seem to let me downgrade to a 1.x.x.x version either. No telnet connection for me, though I can get a ping.  I am wondering if Siglent is trying to permanently patch new units to be unhackable through the currently known means and is holding on to the new firmware to prevent people from messing around with it.

Did you try this one? https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4143817/?topicseen#msg4143817

[RyanBoggs]

It won't seem to let me downgrade to a 1.x.x.x version either. No telnet connection for me, though I can get a ping.  I am wondering if Siglent is trying to permanently patch new units to be unhackable through the currently known means and is holding on to the new firmware to prevent people from messing around with it.

Did you try this one? https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg4143817/?topicseen#msg4143817

Yes I did.  No telnet on port 5024 either.

[Bicurico]

You must be doing something wrong then.

This is the SCPI port and it must work.

[RyanBoggs]

I figured I might be.  It's been a while since I have done anything with telnet like this and it isn't my specialty.  I tried it with both PuTTY and the Windows built-in telnet.