Update:
--------------------------------------------------------
Instructions for the CX to CXCAS Exploit (Quick version)
--------------------------------------------------------
READ ME!
This information assumes that the reader is at risk for exploiting a TI-Nspire CX touchpad only calculator, wherever CX is denoted. Also, this instructional slightly curtails the already NlaunchCX v2.0 instructions, and tries to combine all restarts and steps where ever possible making an efficient and speedy non-CAS CX to a CXCAS switch, with out intermediary steps. In other words, this report is a quicker method for getting the CX OS to the "CXCAS OS exploit point", if one will, and works the same, if not better. However, I make no guarantees that it can be recreated exactly as stated for others. Do further research if uncomfortable with this modified exploit method before proceeding.
Furthermore, bricking the CX calc. is possible, but unheard to me. If worse comes to worse, just reinstall the original OS at step #2 through the TI-Nspire PC Software, then do it again at reboot. (Then close this instructional, and walk away very quickly) 
I make no guarantees that no damages, or damages, will, or will not occur to ones CX calc. ;P On top of this, I do not condone illegal uses for the instructions contain herein. "They're on their own, especially if clueless". However, if anyone has questions, if it can be made more efficient, grammatically, or technically better, it's for those to do what they will. Otherwise, if one is hesitant, do some research by reading all posts from where this exploit began rumored.
Last but not least, I'm in the process of coding a C++/VB program to make the below steps even simpler. If allowed to do so, a "No Brainer" Exploit.zip/.exe for the Non-CAS to CAS TI Nspire calculators maybe available in the future, if I can find the time. The source files will be included of course, for those who want to improve upon it.
With that in mind....
CX calculators with serials ending with P-xxxxA-I, has in my research will work based on other testimonies, including my own. Otherwise, this exploit, or possibly other methods like this, may or may not work; outside of downgrading the CX OS, if even that.
For the sake of simplicity, The below exploit is for CX serial# P-xxxxA-I and OS's before or on 3.2.3.1233.tcc OS, but not including 3.2.3.1233.tcc onward.
----------------------
Cautions and Warnings:
----------------------
See previous posts
I have bolded some steps to hopefully make it easier.
-------------
Instructions:
-------------
Please read through first, and follow the steps exactly for any exploit to be successful. (See below For original nlaunch exploit instructions if needed)
1. Download TI-Nspire PC Software 3.2.0.124 from TI website or http://tiplanet.org/forum/archives_voir.php?id=5948, install, and run.
a) Connect both CX calc and PC with the USB cable, if it's not already, and backup all data on CX calc.
b) Find, and connect to the CX calc. handheld through the TI-Nspire PC software by clicking on the lower right icon, where "Select
A Handheld" is found.
2.
Download TI-NspireCX versions , 3.1.0.392, 3.2.0.1212, 3.2.0.1219 or 3.2.3.1233.tcc from:
http://ti-pla.net/a3717 a) *NOTE* the unit may already have one of these CX OSs already pre-installed.
b) Check under 5. Settings, 4. Status, tab, and About on the CX calc.first if in doubt.
c) If so proceed to step #3 and ignore
http://ti-pla.net/a3717.
d) If not, download a suitable OS from:
http://ti-pla.net/a3717, and use the TI-Nspire PC Software to install before proceeding further.
3. Download, extract/unzip, nlaunchy CX 2.3 from:
https://github.com/Excale/nLaunchy 4. Download, install, and run TNOC from:
http://ti-pla.net/a19225. Download TI-NspireCXCAS-3.1.x.xxx.tcc from:
http://ti-pla.net/a3718 (*Notice* this is the CXCAS OS and not the CX OS)
6. Focus the TNOC program and load the downloaded TI-NspireCXCAS-3.1.x.xxxx.tcc file.
a) The TNOC executable is found here, more or less. C:\x...\TNOC\TNOC_1.24\Windows\TNOC_en.exe
b) Check the Delete boot2 box, then one can optionally delete the samples files in the Example folder, and process. However, this does not delete the Example folder, just the samples in the Example folder.
c) After TNOC'ing the TI-NspireCXCAS-3.1.x.xxxx.tcc file, find, and rename the TI-NspireCXCAS-3.1.x.xxxx_xx.tcc to "phoenix.tns"
d) Select the handheld by finding the handheld icon in the LRH screen in the TI-Nspire PC Software.
e)
Add folder named nlaunch under...Documents\nlaunch\ (Left bottom screen area, where -Documents/+examples+MyLib...etc. are)
f)
Drag phoenix.tns, into \nlaunch. (Although, any directory under the Document root will work)
g) Drag #3. files from nlaunchCX\CX\
{nlaunch.tns, preloader.tns} into Document\nlaunch.
x) (For trogfield,
preloader.tns was skipped because it didn’t come in the file)
7. Put CX calc into Maintenance Options Mode by pressing and holding
{doc+enter+EE} . (Tricky)
a) *Note* The calculator can be off, or on for steps #1.- #7. Either depress with by putting it on your leg with a sharp screwdriver or a paperclip in between, then lifting off of your leg. Or take the battery out, then plug it in while holding the three buttons.
b) Then depress and release the reset button on CX calc. back.
c) Once reset shows the TI screen loading bars, then release {doc+enter+EE}.
d) When CX calc enters Maintenance Options,
choose 2 to delete OS, choose 1 to proceed, deleting, and then press any key to restart.
8. After the CX restarts, Open TI-Nspire PC Software, if not already opened, with CX calc. connected.
a) When the CX calc. restarts, shows a caution (/!\) symbol, Install OS, and the progress bar is stuck at 60%....
b) Select the CX hand held again by finding the handheld icon in the LRH screen in the TI-Nspire PC Software.
b2) follow step 6e-g if you have forgotten. c) Drag or copy the nlaunch.tco from the PC nlaunchCX\CX\ into CX calc. Documents\nlaunch\
d) The TI-Nspire PC software will give an error dialog, "Error Experienced a problem while communicating with the handheld. A retry may be successful." but low and behold, it installs the nlaunch.tco anyway on the CX calc.
e) It takes a few minuets for the nlaunch exploit to install the phoenix.tns file.
f) If steps #1.- #8. c). are done properly, the TNOC'ed phoenix.tns "CXCAS OS" file will install and reboot. Then ABC123, blink, then ABC1234 will appear briefly in the upper LH corner of the CX calc, at the restart of the nlaunch.tco\phoenix.tcc install.
g) If not, push the reset button on back of CX calc. again and repeat #8.
9. Once installed, go through all the CX "CXCAS" calc. setup prompts.
a) *Notice* one of the CX system start up prompt says a CXCAS OS was installed. This can be further investigated by checking 5. Settings, 4. Status, tab, and About on the CX calc. to see if indeed the CX is now a CXCAS. If not start over, give up, and reinstall the CX back to the original OS at #2. (Then slowly close this instructional, and walk away very slowly)
b) *Note* If those have made it this far, and have had success, congrats. One is not "Out of the woods yet", Do Not Upgrade the calculator with an OS unapproved by this exploit mentioned in, and, or before this post until it's safe to do so. Mainly 3.2.4.xxxx.tcc OS onward, but others on may render the CX calc. stuck with that OS. Which ultimately means the unit is hard coded with no hopes in downgrading to make this exploit work again, or again it might work. (Per other testimonials)
c) However, my CXCAS V3.2.0.1219 OS works, but not all CX/CXCAS OSs will nlaunch correctly exploit. So read up on what has worked, and ignore what has not been posted as exploitable.
Show Posts
