0% found this document useful (0 votes)
230 views5 pages

Debricking WRT160NL via USB TTL

The document provides instructions for debricking a Linksys WRT160NL router using a USB to TTL serial cable and TFTP. The steps include: 1) connecting the serial cable to the router and a computer; 2) using TFTP to upload new firmware from the computer to the router; 3) accessing the router console to initiate the firmware upgrade process. Following these steps will allow the bricked router to be restored by reflashing it with new firmware over the serial connection.

Uploaded by

Boris Lukashev
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
230 views5 pages

Debricking WRT160NL via USB TTL

The document provides instructions for debricking a Linksys WRT160NL router using a USB to TTL serial cable and TFTP. The steps include: 1) connecting the serial cable to the router and a computer; 2) using TFTP to upload new firmware from the computer to the router; 3) accessing the router console to initiate the firmware upgrade process. Following these steps will allow the bricked router to be restored by reflashing it with new firmware over the serial connection.

Uploaded by

Boris Lukashev
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Howto debrick WRT160NL with USB2.

0 to RS232 TTL

What you need :


➔ Linux (ubuntu/debian) with a tftp client and a serial terminal access (in this paper I used gtkterm)
➔ USB2.0 to RS232 TTL + 3 Cables (PL2303 Chip.)
➔ Bricked WRT160NL
➔ Some time

In this howto I will detail the procedure for a debirck WRT160NL with a 3.3v ttl serial port with a PL2303 chipset.
I bought it at $ 5: [Link]
main_page=product_info&products_id=158&zenid=ijma27dcmlum392tonl52bde71

here is the picture of the product received, it comes with 4 cables :

Open your WRT160NL (nb : that will void the warranty)

Sionib 2010 27/11/10 1/5


Connected as in the photo. As you can see we just need the GND (black), RX (yellow) & TX (brown)

An other photo overview :

Sionib 2010 27/11/10 2/5


Now open gtkterm and configure like this :

Or if you prefer to use putty :

Sionib 2010 27/11/10 3/5


Validate the configuration and turn on the router and see the console access :

U-Boot 1.1.6 (May 12 2009 - [Link])

DRAM: ar7100_ddr_initial_config(237) enter!


ar7100_ddr_initial_config(269) exit!

U-Boot 1.1.6 (May 12 2009 - [Link])

AP81 (ar7100) U-boot


sri
32 MB
WRT160NL u-boot version: 1.0.0
Top of RAM usable for U-Boot at: 82000000
Reserving 279k for U-Boot at: 81fb8000
Reserving 192k for malloc() at: 81f88000
Reserving 44 Bytes for Board Info at: 81f87fd4
Reserving 36 Bytes for Global Data at: 81f87fb0
Reserving 128k for boot params() at: 81f67fb0
Stack Pointer at: 81f67f98
Now running in RAM - U-Boot at: 81fb8000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
*** Warning - bad CRC, using default environment

In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
ag7100 get ethaddr for device eth0
Fetching MAC Address from 0x81feb1e0

--------***** Get the RTL8306SD Manufactory ID=379c *****-------


Reg6: speed=0 nway=1 duplex=0
Reg5: speed=0 nway=0 duplex=0
Reg1: a1=7fd9 a2=30e0 a3=15ac a4=30e0 a5=0
Reg1: a1=7fd9 a2=30e0 a3=15ac a4=30e0
Reg1: a1=7fd9 a2=30e0 a3=15ac a4=30e0
Reg1: a1=7fd9 a2=30e0 a3=15ac a4=30e0
Reg1: a1=7fd9 a2=30e0 a3=15ac a4=30e0
eth0: [Link]
eth0 up
eth0
### main_loop entered: bootdelay=1

Hit any key to stop autoboot: 1 ### 0


@t this moment hit ctrl+c to stop boot sequence.

To update the firmware via tftp enter this command :


upgrade [Link]

Like this :
ar7100> upgrade [Link]
check link duplex:Full/speed:100
dup 1 speed 100
Tftpd start listening on port[69]!
Load address: 0x80060000

On your Linux computer open a terminal (The ip address of your PC must be [Link]/24)
$ wget [Link]
[Link]
$ mv [Link] [Link]
$ tftp [Link] 69
tftp> binary
tftp> put [Link]

And look at gtkterm :

Sionib 2010 27/11/10 4/5


Receiving firmware [[Link]] from [[Link]]
Write File : [Link]
#

Current Code Pattern:NL16 , Upgrade Code Pattern:NL16

Code Pattern is correct!


################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
######################################
done
Bytes transferred = 4849696 (4a0020 hex)
load addr= 0x80060000
boot file= [Link]
NetBootFileXferSize= 004a0020
Erase linux kernel block !!
From bf040000 To bf7dffff
Erase Flash from 0xbf040000 to 0xbf7dffff in Bank # 1
First 0x4 last 0x7d sector size 0x10000
#### 4#### 5#### 6#### 7#### 8#### 9#### 10#### 11#### 12#### 13#### 14#### 15####
16#### 17#### 18#### 19#### 20#### 21#### 22#### 23#### 24#### 25#### 26#### 27####
28#### 29#### 30#### 31#### 32#### 33#### 34#### 35#### 36#### 37#### 38#### 39####
40#### 41#### 42#### 43#### 44#### 45#### 46#### 47#### 48#### 49#### 50#### 51####
52#### 53#### 54#### 55#### 56#### 57#### 58#### 59#### 60#### 61#### 62#### 63####
64#### 65#### 66#### 67#### 68#### 69#### 70#### 71#### 72#### 73#### 74#### 75####
76#### 77#### 78#### 79#### 80#### 81#### 82#### 83#### 84#### 85#### 86#### 87####
88#### 89#### 90#### 91#### 92#### 93#### 94#### 95#### 96#### 97#### 98#### 99####
100#### 101#### 102#### 103#### 104#### 105#### 106#### 107#### 108#### 109#### 110#### 111####
112#### 113#### 114#### 115#### 116#### 117#### 118#### 119#### 120#### 121#### 122#### 123####
124#### 125
Erased 122 sectors
Programming.........
Copy to Flash... write addr: bf040000
done
ar7100>

Normally if you get up here, the router is functional and you only have to type "go"

Enjoy.

Sources :
[Link]
[Link]
[Link]
[Link]
[Link]

Sionib 2010 27/11/10 5/5

You might also like