New Antminer S15 T15 overclock firmware ( update with video )

[blacksheepwall]

Hi All:
     Below is the S15 and T15 overclock firmware.
     It need to be flashed by SD card.
     SD card flashing method refer to bitmain official link:
     https://support.bitmain.com/hc/en-us/articles/360033757513-S17-S17Pro-S9-SE-S9k-Z11-control-board-program-recovery-SD-card-flashing-with-customized-PW-
     1,S15 firmware link is :https://antfirmware.oss-cn-beijing.aliyuncs.com/blacksheepwall_s15_0820_sd_udf_v11.tar.zip
     2,T15 firmware link is :https://antfirmware.oss-cn-beijing.aliyuncs.com/blacksheepwall_t15_0820_sd_udf_v11.tar.zip
     3, Unzip the firmware to the SD card. Keep the contents at SD card root path
     3, Because the S15 and T15 power unit is 1800W. You'd better not overclock the miner too much.
     4, This firmware using fixed mode. S15 default freq and voltage is 18.2V(400M).ideal hashrate is 29.5T
     5, T15 is 19.5V(550M).ideal hashrate is 25T
     6, I share my exploit experience to everyone：
     step1:  Get a S15 control board .Find the 4 signal port on board. like RX.TX.GND,3.3V.
     step2:  Connect the 4 signal to uart, then uart to serial port , serial port to USB , USB to PC.
     step3: Run Serial port tool on PC. Baud rate is 115200-8-1.
     step4: Then you can get the system kernel log .and login the system by Serial port tool.
     step5: Get the miner process like cgminer or bmminer at /usr/bin/ path.
     step6:  Use the decompile tool to analyse the miner process file.
     step7:  The decompile code is assembly. Try to locate the related configure on code by track the printf in miner process log。
     step8:  Edit the assembly code directly. It's a little hard by not Impossible.
     Everyone can try this method.

     If you find it useful. Throw some satoshi to the me : 3B8G4bmAQdhViTaZd2inKDfK8BwzcTG7tW .Thanks

[1714983615]

1714983615

[taserz]

Now what are you using to decompile? Since you can't run IDA's armserver on the control board to analyze the binary or are you not using a debugger. I understand how it works and it should work just curious on your methodology which is different approach.

[blacksheepwall]

I upload a video to Youtube. Show how to decompile, Analysis , and edit the firmware. Link is https://youtu.be/D48PXVvyLEA

[taserz]

Ahh I see. You pulled cgminer off it and then did it without the need of the debugger. I assumed for the 15 series cgminer was slightly obfuscated but it looks like they didn't even bother to make it difficult on the 15 series. But I mean hey that is solid way to patch it. As long as they don't obfuscate it this will work on their newer firmware as well. Granted this is fixed frequency and doing that allows basic tweaks it's far better than stock.

[cfbtcman]

Let me see if i understand, i can just use the firmware to flash and i recover SSH access?
What is default password?

[Pizzi_h]

serms my s15 will not use fixed mode with your firmwire.

flashed it with sd and all. the firmwire got loaded but fixed mode doesent seems to work.

is there anyway to change "low temp enviroment"?

i dont have ida pro version. is there any other software that work with elf to arm?

newbie here

[Somi1999]

Hi, I am from Serbia.
I use your firmware and it was all good.
I have one problem now, chips for fans burned.
Do someone just know how to disable fan check in firmware? Thanks in advance.
Miloš Ljubičić from Serbia.

[zotzman]

Hello,

I just flashed my T15 and now my fault light is on , I can't access it to restore it to factory settings, and the reset methods didn't work.  I downloaded the T15 zip file, unzipped it to my 16GB flash drive, and put it in to the SD slot and now fault light.  Can anyone help?