login | register
Wed 01 of Aug, 2007 [09:30 UTC]

voip-info.org

Search with Google
Search this site with Google. Results may not include recent changes.

Web www.voip-info.org
Shoutbox
  • Aykut, Wed 01 of Aug, 2007 [07:53 UTC]: Hi all, does anybody know about Thomson ST2030 SIP phone. I have upgraded it to latest version (1.56) but "Hold" and "Conf" features are not working after the upgrade ?? Do you know any solution or do you have Ver. 1.52 ?? Where can I find it?
  • Edward J Brown, Tue 31 of Jul, 2007 [23:33 UTC]: Has anybody experienced Choppy voice quality when using a Linksys SPA942 in an Asterisk Conference bridge? It works fine with my polycom and Cisco, but sucks with my Linksys.
  • www.astawerks.com, Fri 27 of Jul, 2007 [18:00 UTC]: does anyone use asterisk on top of clark connect? does it work good?
  • simon, Fri 27 of Jul, 2007 [14:16 UTC]: Hi All, Has anyone here managed to get the Cisco79x1 to successfully fail over to the backup proxy. I have 2 asterisk servers , handsets all register and function, except that backup proxy function doesn't work. Any working example would be very apprecia
  • Matthew Richmond, Thu 26 of Jul, 2007 [03:40 UTC]: using the page() application to page across our building...often the meetme conferences don't disconnect after the caller hangs up. Anyone else having this problem. (using Polycom phones)
  • Matthew Richmond, Wed 25 of Jul, 2007 [02:58 UTC]: thanks Nicholas Blasgen! I haven't worked with AGI before, but there's always a first! Thanks again!
  • Nicholas Blasgen, Tue 24 of Jul, 2007 [19:18 UTC]: Matthew Richmond, AGI will handle all that for you.
  • sam, Mon 23 of Jul, 2007 [16:39 UTC]: need help - certain voicemail extension will stop working and recording voicemail on asterisk - anyone know why and how to fix it? Thanks
  • john haji, Mon 23 of Jul, 2007 [14:55 UTC]: free calls to pakistan
  • bong, Sat 21 of Jul, 2007 [19:09 UTC]: hi good day to all can anyone help me how to configured the nortel sip to the signaling server and how to activate in mobile w/ sip compatible without mcs
Server Stats
  • Execution time: 0.38s
  • Memory usage: 2.19MB
  • Database queries: 31
  • GZIP: Disabled
  • Server load: 2.24

GXP-2000 Firmware Hacking

Technical Information about the GXP-2000 Firmware


Basically I started trying to reverse engineer the GXP2000 firmware, so that i could modify it and load hacked firmware onto my phones but first i had to work out how the boot55.bin and gxp2000.bin files were constructed... I decided to document it here so that others can contribute and learn. - SoloFlyer (Feb21/06)


Might be a good idea to create a project like rockbox to provide generic firmware for a range of phones.

0x00 - 0x0F


The First 16Bytes of every GXP-2000 firmware look like this in hex :)
First 16Bytes ( 0x00 - 0x0F )
Firmware Versions File File Version 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F ACSII
1.0.1.9, 1.0.1.12, 1.0.1.13 boot55.bin 1.0.1.2 00 00 41 8A AF 69 01 00 01 02 07 D5 04 16 0C 0E ..A.¯i.....Õ....
1.0.2.6, 1.0.2.3 boot55.bin 1.97.1.99 00 00 44 78 97 24 01 61 01 63 07 D6 01 13 10 22 ..Dx.$.a.c.Ö..."
1.0.2.3, 1.0.2.6, 1.0.2.8, 1.0.2.13 boot55a.bin 1.0.2.3 00 00 43 7E D5 4B 01 00 02 03 07 D6 01 13 0E 11 ..C~ÕK.....Ö....
1.0.1.9 gxp2000.bin 1.0.1.9 00 04 88 C5 E5 C7 01 00 01 09 07 D5 06 01 10 39 ...ÅåÇ.....Õ...9
1.0.1.12 gxp2000.bin 1.0.1.12 00 04 CA 25 A9 B0 01 00 01 0C 07 D5 08 0F 0F 39 ..Ê%©°.....Õ...9
1.0.1.13 gxp2000.bin 1.0.1.13 00 05 1D 31 F2 EC 01 00 01 0D 07 D5 0A 0D 13 00 ...1òì.....Õ....
1.0.2.3, 1.0.2.6 gxp2000.bin 1.0.1.99 00 05 1D 8B 81 A0 01 00 01 63 07 D6 01 13 12 32 ..... ...c.Ö...2
1.0.2.3 gxp2000a.bin 1.0.2.3 00 06 99 2F A9 5D 01 00 02 03 07 D6 01 18 0D 27 .../©].....Ö...'
1.0.2.6 gxp2000a.bin 1.0.2.6 00 06 A9 C0 1A 82 01 00 02 06 07 D6 02 02 12 34 ..©À.......Ö...4
1.0.2.8 gxp2000a.bin 1.0.2.8 00 06 4C A4 EC D9 01 00 02 08 07 D6 02 06 10 0C ..L¤ìÙ.....Ö....
1.0.2.13 gxp2000a.bin 1.0.2.3 00 06 56 D2 E8 F1 01 00 02 0D 07 D6 02 15 0D 23 ..VÒèñ.....Ö...#


0x00, 0x01, 0x02, 0x03 decimal size of file in bytes(including header) devided by 2 and converted to hex
0x04, 0x05 Checksum
0x06, 0x07, 0x08, 0x09 Version Number of File in decimal converted to hex
0x0A, 0x0B Build Date year
0x0C Build Date month
0x0D Build Date day
0x0E Build Time Hours
0x0F Build Time Minutes

0x010 - 0x1EF

File Name ( 0x10 - 0x1F )
Firmware Versions File File Version 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F ACSII
1.0.2.8 boot55.bin 1.0.2.8 62 6f 6f 74 35 35 2e 62 69 6e 00 00 00 00 00 00 boot55.bin......


The Filename is hard coded into the file starting at 0x10 and is padded with 00's. the 00's continue until 0x1EF in every file i have looked at

0x1F0 - ????


0x1F0 - 0x2D1 in 1.0.2.13 gxp200a.bin
0x1F0 - 0x32D in 1.0.2.13 boot55a.bin

There is another Unique string here.... followed by some sort of table of values i dont know what it is but i suspect its important...



Created by SoloFlyer, Last modification by perepo on Wed 30 of May, 2007 [03:03 UTC]

Please update this page with new information, just login and click on the "Edit" or "Add Comment" button above. Get a free login here: Register Thanks! - support@voip-info.org

Page Changes | Comments

Sponsored by:

Terms of Service Privacy Policy
© 2003-2007 Arte Marketing, Inc.

Powered by bitweaver