Skip to main content

Questions tagged [router]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
115 views

Router shadow password generation

I'm reverse engineering a router, I'm fairly new to embedded devices and how Linux boots up, but I have a root UART shell, there's already a password hash in the /etc/shadow file, these passwords/...
spergy's user avatar
  • 1
0 votes
1 answer
174 views

I need to decipher my Huawei hg8245h modem sip phone password [closed]

I have a Huawei hg8245h modem and unfortunately, I have forgotten my sip phone password and my ISP does not provide it to me. I have downloaded the modem configuration and this is the section related ...
WillingGood's user avatar
0 votes
0 answers
80 views

decrypt pppoe password of huawei ONT HG8145V5 ROUTER [duplicate]

Hi my ISP is not providing me the PPPOE password but i need them urgently in the confrigation file the password is encrypted Password="$2A;L6(Lcj/Y"YG(-gG]@3Z!QHYZ-kQ[AyTQ}<zrK$" ...
RAHUL's user avatar
  • 1
1 vote
0 answers
128 views

UBIFS image weirdness [SOLVED]

So, I dumped old routers ubifs image from memory and apparently it can't be read or mounted, throwing errors like "missing block size" and "missing data" although I see in hexdump ...
Josip Stjepanović's user avatar
1 vote
1 answer
56 views

Help wanted identifying 4x mimo cellular data antennas in HR-01 5G router

I would like to attach an external 4x mimo patch or yagi antenna to a sharp HR-01 5g home router. https://www.docomo.ne.jp/home_5g/router/ I am relatively confident it is 4x mimo based on the ...
Peter's user avatar
  • 121
2 votes
0 answers
327 views

ZTE F670 V1.1.10P3T21 encrypted config.bin

I want to decrypt config.bin For this I found in cspd following code undefined4 CspDBInitPdtInterface(undefined4 *param_1) { dbAddCfgItem(0xffff,0,"/userconfig/cfg/db_user_cfg.xml"); ...
Elec Art's user avatar
2 votes
1 answer
3k views

Decrypt the config file of ZTE F660 v9

I need support to decrypt the config file of ZTE F660 v9 router. I have telnet access to the router and the below link consists of the following files. Link config.bin, paramtag, cspd, db_user_cfg.xml,...
zhanshi123's user avatar
1 vote
0 answers
168 views

Just router username & password please

I want to convert my ISP hg8240t5 given router from route WAN to bridge WAN mode and they are using PPPoE connection. I also have a backup of the configuration and its file name is "hw_ctree.xml&...
qatar2022's user avatar
2 votes
0 answers
69 views

How can I patch out shm in Ghidra?

I've been trying to emulate a Mips binary in qemu, but I kept getting an error for shared memory allocation. I decompiled the function where it happens in Ghidra: local_18 = dm_shmInit(0); if (...
qwfpgjluy's user avatar
2 votes
0 answers
626 views

How to extract the firmware from the flash chip of the router?

Hi, I've been struggling with a subject since 2 weeks. I have MSS5004W model router from RicherLink. The board is RL-S4005ef. This device has OpenWrt installed but it's not normally supported by that ...
SwordLion's user avatar
2 votes
0 answers
69 views

UART Interface Router (HUAWEI) V724 Typ A

I am trying to identify the UART pins on the board in order to debrick the router. Any help would be appreciate it.
Alma's user avatar
  • 21
2 votes
1 answer
758 views

Huawei HG8245W5 Router PPPoE Password Decryption

My ISP is not providing pppoe accounts but I need to bridge to my server. I only have encrypted password. Password is " $2'4e0YX=y6Q]$\9$c#-+F-h2&Tva4"GYn+qY)x>W$ " Can anyone ...
Aol's user avatar
  • 21
2 votes
0 answers
154 views

Assistance with dumped firmware image

I need some assistance in reverse engineering this dumped nor flash image. binwalk yields this after norflash has been dumped (removed the flash chip, dumped it with CH341a and flashrom) DECIMAL ...
MisterZZ's user avatar
2 votes
1 answer
1k views

How can I decrypt password of HG8145V5 PPPoE?

I want to convert my ISP given router from route WAN to bridge WAN mode and they are using PPPoE connection. I also have backup of configuration and its file name is "hw_ctree.xml". I was ...
Yatin Goyal's user avatar
2 votes
0 answers
2k views

Huawei HG8145V5 Router PPPoE Password Decryption

My ISP is not providing pppoe accounts but I need to bridge to my server. I only have encrypted password. Password is " $26w5`KU6gm#C73JK48OG8_jdY'dQePTOu$0'G8q\V$ " Can anyone help me ...
Maung Maung Myat San's user avatar
2 votes
1 answer
194 views

Can an OpenWrt FIT kernel be virtualized in qemu?

I have a router I'd like to virtualize in order to do some dynamic analysis. I could virtualize individual binaries with qemu, but I'd like to have the whole ecosystem up and running. I'll start here: ...
Matthew Tingum's user avatar
1 vote
0 answers
417 views

How to reverse engineer this router firmware using binwalk?

I want to modify router firmware so I can enable telnet. What steps should I take? The router is hg630v2; the firmware can be found at this link. It's Linux based. When I do binwalk --signature --term ...
Hosni's user avatar
  • 11
1 vote
0 answers
5k views

PPPoE username and password from ZTE ZXHN F680 V6

I'm trying to extract the PPPoE username and password from a ZTE ZXHN F680 V6 router. I have obtained several files from the router and can get access to other files if needed. Here is where I'm at. ...
I'm Root James's user avatar
1 vote
1 answer
2k views

how to decrypt zte zxhn h108n V2.5.5_VDFT13 config.bin?

I need the root password from my router. I need to change my snr because my provider had lock it at a high value. I try to decrypt my config.bin file but no result. I try first with zte-config-utility ...
gsxrk7's user avatar
  • 11
2 votes
0 answers
122 views

How I can interface the MCU without soldering?

My router has the following pin layout between flash memory and MCU: The big chip is the MCU from a Sercomm H300s router. What I want is to analyze the signaling between 2 chips using the most ...
Dimitrios Desyllas's user avatar
1 vote
0 answers
687 views

Decrypting my router config backup file

so I have this ONT router/mode (ZTE F660) provided to me by the ISP, it's interface contains very little settings and I wanted to see if I can get anything useful from it's config backup file. The ...
Veoxer's user avatar
  • 111
2 votes
0 answers
1k views

How to perform full MIPS system emulation with QEMU, using the squashfs image and uBoot kernel image?

TL;DR: Need tips on emulation of MIPS-BE system using QEMU with the help of squashfs image file and uBoot Kernel image file extracted from the firmware file. Long Version: - What I have: A cheap ...
secnigma's user avatar
0 votes
1 answer
775 views

Recreating ping command injection using curl instead using web page on Huawei router

I have an ARM based Huawei router and Im trying to do injection vulnerability on page under diagnostics where's "ping" feature is. So first I tried this command -c 1 127.0.0.1 and it worked -...
Vido's user avatar
  • 515
0 votes
1 answer
324 views

Detecting and reading embedded filesystems on desktop Linux

I have some data from a NAND chip, dumped using the built in nanddump utility on the embedded device. This is the device information: https://openwrt.org/toh/bt/homehub_v5a The NAND chip is 128MiB ...
moo's user avatar
  • 111
0 votes
0 answers
3k views

How to download restricted backup config file on HG8245H router

I have HG8245H router and I want to download backup config file to which I dont have access as regular user in my case its caled root. So I downloaded firmware of my router and extracted it using ...
Vido's user avatar
  • 515