Hello. You may know, only some of the encryption keys are provided - basebinary 107, 108, 115, 120
I wanted to share the key for device #106, Apple TimeCapsule 1st Gen: 513C1CA5BF035127335F7C2596AA20AA, and ask if anybody can share the key for device #109, Apple TimeCapsule 2nd gen dual-band?
Here's how I got the #106 key: I used acp --setprop dbug 0x1 to enable ssh, logged in, then curl -T /dev/rflash0.raw ftp://username:[email protected]/flash0.primary, then binwalk -e to separate the gzip'd kenrel+filesystem.
You can find the key by opening the uncompressed image and searching for the 16 bytes right before "gec�.APPLE BOOTLOADER INFO"
Why? I'm trying to upgrade my 1st gen TimeCapsule to Atheros dual-band; I have the correct card from a failed 2nd gen. I was able to decrypt and flash the #108 Airport Extreme v3 firmware (similar hardware, but DON'T TRY UNLESS YOU CAN FIX THE CHECKSUM or RECOVER YOUR BRICK). It boots and partially detects the card, so I'm close... I just need that #109 key... Thanks!