Questions tagged [router]
The router tag has no usage guidance.
24
questions
0
votes
1
answer
100
views
I need to decipher my Huawei hg8245h modem sip phone password [closed]
I have a Huawei hg8245h modem and unfortunately, I have forgotten my sip phone password and my ISP does not provide it to me. I have downloaded the modem configuration and this is the section related ...
- 13
0
votes
0
answers
50
views
decrypt pppoe password of huawei ONT HG8145V5 ROUTER [duplicate]
Hi my ISP is not providing me the PPPOE password but i need them urgently in the confrigation file the password is encrypted Password="$2A;L6(Lcj/Y"YG(-gG]@3Z!QHYZ-kQ[AyTQ}<zrK$" ...
- 1
1
vote
0
answers
73
views
UBIFS image weirdness [SOLVED]
So, I dumped old routers ubifs image from memory and apparently it can't be read or mounted, throwing errors like "missing block size" and "missing data" although I see in hexdump ...
1
vote
1
answer
48
views
Help wanted identifying 4x mimo cellular data antennas in HR-01 5G router
I would like to attach an external 4x mimo patch or yagi antenna to a sharp HR-01 5g home router.
https://www.docomo.ne.jp/home_5g/router/
I am relatively confident it is 4x mimo based on the ...
- 121
2
votes
0
answers
177
views
ZTE F670 V1.1.10P3T21 encrypted config.bin
I want to decrypt config.bin
For this I found in cspd
following code
undefined4 CspDBInitPdtInterface(undefined4 *param_1)
{
dbAddCfgItem(0xffff,0,"/userconfig/cfg/db_user_cfg.xml");
...
- 21
2
votes
1
answer
1k
views
Decrypt the config file of ZTE F660 v9
I need support to decrypt the config file of ZTE F660 v9 router. I have telnet access to the router and the below link consists of the following files.
Link
config.bin,
paramtag,
cspd,
db_user_cfg.xml,...
- 73
1
vote
0
answers
125
views
Just router username & password please
I want to convert my ISP hg8240t5 given router from route WAN to bridge WAN mode and they are using PPPoE connection. I also have a backup of the configuration and its file name is "hw_ctree.xml&...
- 19
2
votes
0
answers
66
views
How can I patch out shm in Ghidra?
I've been trying to emulate a Mips binary in qemu, but I kept getting an error for shared memory allocation. I decompiled the function where it happens in Ghidra:
local_18 = dm_shmInit(0);
if (...
- 21
2
votes
0
answers
505
views
How to extract the firmware from the flash chip of the router?
Hi, I've been struggling with a subject since 2 weeks.
I have MSS5004W model router from RicherLink. The board is RL-S4005ef. This device has OpenWrt installed but it's not normally supported by that ...
- 21
2
votes
0
answers
50
views
UART Interface Router (HUAWEI) V724 Typ A
I am trying to identify the UART pins on the board in order to debrick the router. Any help would be appreciate it.
- 21
2
votes
0
answers
508
views
Huawei HG8245W5 Router PPPoE Password Decryption
My ISP is not providing pppoe accounts but I need to bridge to my server.
I only have encrypted password. Password is " $2'4e0YX=y6Q]$\9$c#-+F-h2&Tva4"GYn+qY)x>W$ "
Can anyone ...
- 21
2
votes
0
answers
132
views
Assistance with dumped firmware image
I need some assistance in reverse engineering this dumped nor flash image.
binwalk yields this after norflash has been dumped (removed the flash chip, dumped it with CH341a and flashrom)
DECIMAL ...
- 21
2
votes
1
answer
949
views
How can I decrypt password of HG8145V5 PPPoE?
I want to convert my ISP given router from route WAN to bridge WAN mode and they are using PPPoE connection. I also have backup of configuration and its file name is "hw_ctree.xml".
I was ...
- 21
2
votes
0
answers
1k
views
Huawei HG8145V5 Router PPPoE Password Decryption
My ISP is not providing pppoe accounts but I need to bridge to my server. I only have encrypted password. Password is " $26w5`KU6gm#C73JK48OG8_jdY'dQePTOu$0'G8q\V$ " Can anyone help me ...
2
votes
1
answer
160
views
Can an OpenWrt FIT kernel be virtualized in qemu?
I have a router I'd like to virtualize in order to do some dynamic analysis.
I could virtualize individual binaries with qemu, but I'd like to have the whole ecosystem up and running.
I'll start here:
...
- 105
1
vote
0
answers
369
views
How to reverse engineer this router firmware using binwalk?
I want to modify router firmware so I can enable telnet. What steps should I take? The router is hg630v2; the firmware can be found at this link. It's Linux based.
When I do
binwalk --signature --term ...
- 11
1
vote
0
answers
3k
views
PPPoE username and password from ZTE ZXHN F680 V6
I'm trying to extract the PPPoE username and password from a ZTE ZXHN F680 V6 router. I have obtained several files from the router and can get access to other files if needed. Here is where I'm at.
...
- 111
1
vote
1
answer
2k
views
how to decrypt zte zxhn h108n V2.5.5_VDFT13 config.bin?
I need the root password from my router. I need to change my snr because my provider had lock it at a high value. I try to decrypt my config.bin file but no result. I try first with zte-config-utility
...
- 11
2
votes
0
answers
103
views
How I can interface the MCU without soldering?
My router has the following pin layout between flash memory and MCU:
The big chip is the MCU from a Sercomm H300s router.
What I want is to analyze the signaling between 2 chips using the most ...
1
vote
0
answers
552
views
Decrypting my router config backup file
so I have this ONT router/mode (ZTE F660) provided to me by the ISP, it's interface contains very little settings and I wanted to see if I can get anything useful from it's config backup file. The ...
- 111
2
votes
0
answers
872
views
How to perform full MIPS system emulation with QEMU, using the squashfs image and uBoot kernel image?
TL;DR:
Need tips on emulation of MIPS-BE system using QEMU with the help of squashfs image file and uBoot Kernel image file extracted from the firmware file.
Long Version:
- What I have:
A cheap ...
- 51
0
votes
1
answer
611
views
Recreating ping command injection using curl instead using web page on Huawei router
I have an ARM based Huawei router and Im trying to do injection vulnerability on page under diagnostics where's "ping" feature is. So first I tried this command -c 1 127.0.0.1 and it worked
-...
- 515
0
votes
1
answer
279
views
Detecting and reading embedded filesystems on desktop Linux
I have some data from a NAND chip, dumped using the built in nanddump utility on the embedded device.
This is the device information: https://openwrt.org/toh/bt/homehub_v5a The NAND chip is 128MiB ...
- 111
0
votes
0
answers
2k
views
How to download restricted backup config file on HG8245H router
I have HG8245H router and I want to download backup config file to which I dont have access as regular user in my case its caled root. So I downloaded firmware of my router and extracted it using ...
- 515