4

I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password

$2*FuHXY<y5$VJl(9f^9z%7;vR%K;84JG$.&O`qM17$

Can anyone identify which algo is used ?

5
  • For your: $2*FuHXY<y5$VJl(9f^9z%7;vR%K;84JG$.&O`qM17$ here is the decrypt code: gcmoct
    – bloosky
    Apr 16 at 6:05
  • Hi and welcome to RE.SE. It would be helpful to add how/where you retrieved this information.
    – 0xC0000022L
    Apr 16 at 11:33
  • How did you decrypted it ?
    – Vido
    Apr 16 at 14:25
  • @bloosky how did you decrypted it ?
    – Vido
    Apr 29 at 12:42
  • How did u solve this i have the same router Sep 6 at 7:41
3

It's probably AES. I saw config files at HG8245Hv5 and HG8245H5 and passwords are looking similar. A bit (just a bit:D) more info is here: https://the-infosec.com/2017/03/20/huawei-hg8245h-router-privilege-escalatio/

13
  • Also mr. Vido I have one question for you too:) Could you please reply on this post if you're reading it?
    – HE9CbITb
    Jan 2 at 19:32
  • Hey @HE9CbITb tnx for your replay it seams that enc. is aes
    – Vido
    Jan 8 at 13:54
  • Hi, @Vido I have one question for you:) In this topic reverseengineering.stackexchange.com/questions/11626/… the issue of decrypting modem config file was discussed. It was recommended to find a file named 'tagparam_m', perform MD5sum of it, get this way AES-key, decrypt config file with this key, decompress zlib and finally get config file in xml. I want to ask you: where did you find this 'tagparam_m' file? I'm looking at firmware file directories (including /var), but I can't find this file. Thank you:)
    – HE9CbITb
    Jan 10 at 11:57
  • Hey @HE9CblTb in my case tagparam_m was in var directory
    – Vido
    Jan 10 at 12:44
  • 1
    Let us continue this discussion in chat.
    – Vido
    Jan 12 at 18:07

Not the answer you're looking for? Browse other questions tagged or ask your own question.