4

I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password

$2*FuHXY<y5$VJl(9f^9z%7;vR%K;84JG$.&O`qM17$

Can anyone identify which algo is used ?

4
  • For your: $2*FuHXY<y5$VJl(9f^9z%7;vR%K;84JG$.&O`qM17$ here is the decrypt code: gcmoct – bloosky Apr 16 at 6:05
  • Hi and welcome to RE.SE. It would be helpful to add how/where you retrieved this information. – 0xC0000022L Apr 16 at 11:33
  • How did you decrypted it ? – Vido Apr 16 at 14:25
  • @bloosky how did you decrypted it ? – Vido Apr 29 at 12:42
3

It's probably AES. I saw config files at HG8245Hv5 and HG8245H5 and passwords are looking similar. A bit (just a bit:D) more info is here: https://the-infosec.com/2017/03/20/huawei-hg8245h-router-privilege-escalatio/

13
  • Also mr. Vido I have one question for you too:) Could you please reply on this post if you're reading it? – HE9CbITb Jan 2 at 19:32
  • Hey @HE9CbITb tnx for your replay it seams that enc. is aes – Vido Jan 8 at 13:54
  • Hi, @Vido I have one question for you:) In this topic reverseengineering.stackexchange.com/questions/11626/… the issue of decrypting modem config file was discussed. It was recommended to find a file named 'tagparam_m', perform MD5sum of it, get this way AES-key, decrypt config file with this key, decompress zlib and finally get config file in xml. I want to ask you: where did you find this 'tagparam_m' file? I'm looking at firmware file directories (including /var), but I can't find this file. Thank you:) – HE9CbITb Jan 10 at 11:57
  • Hey @HE9CblTb in my case tagparam_m was in var directory – Vido Jan 10 at 12:44
  • 1
    Let us continue this discussion in chat. – Vido Jan 12 at 18:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.