Results 1 to 10 of 127
-
6th July 2021, 11:46 PM #1
A guide to patch Nav5 devices
BEFORE YOU START, this of course comes with no guarantee and you must understand that if you try this then you do so at your own risk!
Hi, here we are again, now defeating the security measures of Nav5 devices !
We know this hack will not be widely used because the Nav5 devices already have lifetime maps, but yet it was fun to break it
This hack is technically more complex to achieve and involves the disassembly of the device.
Yes, open the device ! We couldn't find easy open doors to hack using software, so it had to go through hardware...
You'll also need a Windows machine AND a Linux Kali machine, both can be virtual machines.
Linux is necessary because Windows can't handle Linux partitions correctly : yeah, again, this patch was technically more complex !
For the most advanced users here, it looks like Android rooting like you could do on your smartphone ("Download mode"), except there is no "Volume down" button to trigger it and the patch is really adapted to Nav5 filesystem.
Well, let's start now this tutorial.
Overview :
patch MSTMS-Nav5-Navcore24.102
download;
remember to have meta.txt and check that contains the map code you want to use, in MSTMS-Nav5-Navcore24.102 folder.
Previous patches:
Nav5 with Navcore 21.200.0003.411 (18/02/2021) using My Drive Connect, it won't work with other navcore.[*]download the material :
2. Using Windows : Flash EDL = to be able to see the linux partitions of the device
3. Using Kali Linux : Patch the device = Copy the patch files to root the device
Steps to hack :
1. Flash EDL Boot mode : This will allow you to access the userdata partition where to install the patch.
- Disassemble your device, you can follow the first part of the youtube video for a GO520 / Essential :
Be very careful, the screen is fragile, use hard plastic tools to leave no mark, and don't turn them inside like a screwdriver, you'd break the screen.
- Next step can be done in Windows using supplied material, but also in Linux, look at the python script "edl.py" by bkerler in Github
- Install the EDL drivers "QDLoader HS-USB Driver_64bit_Setup.exe" : these drivers were found to be working as we want
In the first installation screen, it will ask you to install WWAN-DHCP or ETHERNET-DHCP : just click cancel on this window and yes, the installation process will continue with the good drivers
- Switch off the device and unplug the USB cable (larger end, it's easier)
- Short the EDL pinouts (see image) using wire or tweezers : be careful not to make shortcut with metallic shields of the motherboard !
For GO520 / Essential :
For Basic 5 inch Wifi :
For Basic 6 inch Wifi :
For VIA 53 :
For PRO 6200 :
- Keep the short in place, plug the USB cable : keep the short in place for 2 seconds
- Remove the short, open the device manager :
- look at the section "Ports (COM and LPT)" for a hardware call "Qualcomm HS-USB QDLoader 9008 (COMXX)"
- take note of the COMXX value (change the XX with your own value !)
If you have something else than "QLoader 9008", it hasn't worked, try again.
In some cases, you'll have to unplug the USB cable and the battery to reset the motherboard (you won't damage your device if your are precautious, don't worry).
- FIRST, MAKE A BACKUP : Edit the file "1_EDL\_backup_userdata.bat", set the good COM port in the command lines and save the file :
emmcdl.exe -p COMXX -f flash_programmer.bin -d fdt -o fdt_%datestamp%%timestamp%.bin
emmcdl.exe -p COMXX -f flash_programmer.bin -d userdata -o userdata_%datestamp%%timestamp%.bin
and then double-click the modified file "1_EDL\_backup_userdata.bat"
=> 2 files fdt_xxxxx.bin (~1MB) and userdata_xxxx.bin (~14GB) are created : they are the only original backup of your device, keep them SAFELY !
- THEN, Patch you device : Launch "1_EDL\patch_bootmode.bat" and enter the good COM port : you should see some information like :
Version 2.15
Downloading flash programmer: flash_programmer.bin
[.....]
<?xml version="1.0" encoding="UTF-8" ?><data><response value="ACK" rawmode="false" /></data>
Status: 0 (null)
=> what is important here is the last line "Status: 0", this means the operation is successful.
The device is now ready for MSTMS patching !
2. Patch your device : you'll be able to install map / radars on your own.
Pre-requisite : This step can only be done in Linux (), Windows is really not able to work on those Linux partitions (believe us, we tried!).
- After EDL, keep the power button of your device pressed for at least 14 seconds (10 seconds if not from EDL),
until you see the debug menu of your device showing the serial number, device capabilities, ...
- Press rapidly the power button 3 times : the device will reboot and the screen will stay on the Tomtom logo.
- Windows / Linux will now recognize 2 new Hard disks : DO NOT FORMAT THEM !!!
- the small contains your unique device information (same content as your backup fdt_xxxxx.bin)
- the big (~14GB) is the internal "userdata" partition (same content as your backup userdata_xxxx.bin)
- In Linux, first disable automount
- Then, as root, use the command "dmesg" or "fdisk -l" to find the userdata partition : on my linux Kali virtual machine, it appeared as "/dev/sdc"
- Copy the folder "2_Linux" of the package to /root of the Linux system you are using : it is easier to work with if you don't really know Linux.
- Go inside the folder "2_Linux"
- Edit the file "patch_nav5.sh" with Linux editor (NOT Windows Notepad, it will corrupt the Linux format of the file) and change the third line ttdevice="/dev/sdc" with the good /dev detected by your Linux box.
- Open a shell, become root (sudo su -), and go to the folder containing the file "patch_nav5.sh" (be sure to be in the 2_Linux folder)
- Make the script executable : chmod +x ./patch_nav5.sh
- Execute the script : ./patch_nav5.sh
- Reboot the device : press the power button once shortly, the device will power off, then press the button for 4 seconds to boot it (Logo Tomtom appearing)
- At device startup, after the progress bar is at the end, our "MSTMS free My Nav5" application will start automatically and get your device patched
3. Map / radar installation or removal
- Use the "TTWinNav5.exe" provided application to install or remove content
a. Click "Get Device info"
b. Select the file to install using "Add new file", add all the files for one map
c. Select where to install the map (prefer sdcard), click "Launch installation"
d. Installation is finished when you have the message "Installation successful"
- We encourage you to install the map on sdcard and remove the sdcard if you want to use Tomtom My Drive Connect
4. EDL Mode difficulties
- You have to do the "patch_bootmode.bat" each time you go in EDL mode.
- Open the Windows device manager to see when the EDL connection closes, as it is immediate when it happens (use script "device manager.bat" to open t.
- If you can't go in EDL mode there may be 2 explanations:
1. the tomtom has not been turned off well : remove the battery and then put it back, finally turn on the tomtom and then turn it off completely and then try the EDL connection
2. the drivers are not installed properly on your PC, so uninstall and then reinstall them, or try an other PC
- If booting to the recovery position fails, you have to repeat the EDL mode and the "patch_bootmode.bat" execution
- Try disconnecting the battery and USB cable to completely reset the device
- If your device does not boot to black Tomtom screen after performing EDL, you may not have installed "patch_bootmode.bat" correctly, do it again
Special thanks to our testers, who dared to trust us when disassembling their devices
Hope you'll enjoy our work, feel free to propose / create improvements !
MSTMS Team, june 2021.MSTMS Reviewed by MSTMS on . A guide to patch Nav5 devices BEFORE YOU START, this of course comes with no guarantee and you must understand that if you try this then you do so at your own risk! Hi, here we are again, now defeating the security measures of Nav5 devices ! We know this hack will not be widely used because the Nav5 devices already have lifetime maps, but yet it was fun to break it ;) This hack is technically more complex to achieve and involves the disassembly of the device. Yes, open the device ! We couldn't find easy open doors to Rating: 5Last edited by MSTMS; 23rd May 2024 at 04:02 AM.
-
The Following 37 Users Say Thank You to MSTMS For This Useful Post:
- [ Click To Expand ]
-
akashiko (7th July 2021), asturcon57 (7th July 2021), biggerdave (6th July 2021), bottoni (26th July 2021), Chauffeur1 (7th July 2021), deirosjuan (25th May 2022), domasb (11th August 2021), domasbutkeviciu (16th August 2021), dosibox (21st January 2023), erystr (7th July 2021), feniceus (19th July 2021), goodoane (9th July 2021), hes388 (25th January 2022), Igor333 (24th February 2024), japie57 (8th July 2021), javado (16th July 2021), jungblume2005 (10th July 2021), kappapc (18th July 2021), Niksan (20th April 2023), omar droug (28th October 2021), OneLover (8th July 2021), Orni (7th July 2021), oxili (14th July 2021), pe1agp (7th July 2021), PeterHimself (7th July 2021), Proukaet (7th July 2021), rachidadam (6th June 2024), seca (10th July 2021), sHAKaJaada (18th September 2022), simba (7th July 2021), Sonaps (8th November 2022), spoon1 (6th July 2021), sylpa27 (2nd December 2021), XisiX (8th July 2021), Xius27 (7th July 2021), yopy (7th July 2021), Zsolt (8th May 2022)
-
18th July 2021, 12:01 AM #2
Thanks for this!!
-
20th July 2021, 11:59 PM #3
Hello
my tomtom 520 after patching does not connect to the computer, cannot see partitions
- Press rapidly the power button 3 times : the device will reboot and the screen will stay on the Tomtom logo.
- Windows / Linux will now recognize 2 new Hard disks : DO NOT FORMAT THEM !!!
-
21st July 2021, 01:16 AM #4
Indicate a little more extensively what are the steps you have taken, the more details you provide, the easier it will be to help you.
-
21st July 2021, 03:37 AM #5
I have created a backup of the device and i Patch device : Launch "1_EDL\patch_bootmode.bat"
looks good
my device will reboot but the screen will not stay on the Tomtom logo
i see the screen of not device connection to the computer
-
The Following 1 Users Say Thank You to gozdzik For This Useful Post:
- [ Click To Expand ]
-
Orni (21st July 2021)
-
21st July 2021, 12:24 PM #6
You have done EDL correctly. In that position you have to make the copy, in that position you have to install " patch_bootmode ". The device is off.
In that same EDL position and device off, you have to reach the black screen.
With that image on the device, you have to press the power button three times. You get to this screen: (recovery)
If you don't get to that screen and the device starts up normally, you should repeat the EDL process and the " patch_bootmode " installation.
It took me many attempts to get to the recovery screen.
Now you can skip the part of making the copy, but your process should be:
- EDL connection. You see the Qualcomm connection in the device manager
- Installation " patch_bootmode ".
- Long press until I see black screen, I had to release before seeing the black screen because otherwise it shows and disappears.
- With the black screen fixed on your device, three short and very fast presses.
The recovery screen is displayed, if not, you must repeat the process.
-
The Following 2 Users Say Thank You to Orni For This Useful Post:
- [ Click To Expand ]
-
-
17th August 2021, 03:15 AM #7
In Linux, first disable automount
how to do it?
-
17th August 2021, 01:31 PM #8
I with Linux Kali did nothing about it and it went well.
-
1st September 2021, 04:13 AM #9
-
1st September 2021, 01:46 PM #10
-
The Following 2 Users Say Thank You to Orni For This Useful Post:
- [ Click To Expand ]
-
seca (29th July 2022), sHAKaJaada (18th September 2022)
iGO R3 HERE EUROPE 2023.Q4
Thank you very much for the contribution