Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save numanturle/c99d3306e9e4e17bb2164dde363406bc to your computer and use it in GitHub Desktop.
Save numanturle/c99d3306e9e4e17bb2164dde363406bc to your computer and use it in GitHub Desktop.
Vmg3312 B10b Firmware Vmg3312 B10b Firmware backdoor account
root@bitforbyte:~/xxx# binwalk 100AAPP7D0.bin
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
131072 0x20000 JFFS2 filesystem, big endian
JFFS2 filesystem extract
total 1492
1049502 drwxr-xr-x 18 root root 4096 Oct 27 23:33 .
1049493 drwxr-xr-x 3 root root 4096 Oct 27 23:33 ..
1049503 drwxr-xr-x 2 root root 4096 Oct 27 23:33 bin
1049509 drwxr-xr-x 2 root root 4096 Oct 27 23:33 data
1049510 drwxr-xr-x 5 root root 4096 Oct 27 23:33 dev
1049512 drwxr-xr-x 14 root root 4096 Oct 27 23:33 etc
1049513 drwxr-xr-x 2 root root 4096 Oct 27 23:33 firmware
1049514 drwxr-xr-x 2 root root 4096 Oct 27 23:33 home
1049515 drwxr-xr-x 6 root root 4096 Oct 27 23:33 lib
1049516 lrwxrwxrwx 1 root root 11 Oct 27 23:33 linuxrc -> bin/busybox
1049517 drwxr-xr-x 2 root root 4096 Oct 27 23:33 log
1049518 drwxr-xr-x 2 root root 4096 Oct 27 23:33 mnt
1049519 drwxr-xr-x 5 root root 4096 Oct 27 23:33 opt
1049520 drwxr-xr-x 2 root root 4096 Oct 27 23:33 proc
1049521 drwxr-xr-x 2 root root 4096 Oct 27 23:33 sbin
1049522 drwxr-xr-x 2 root root 4096 Oct 27 23:33 sys
1049523 lrwxrwxrwx 1 root root 8 Oct 27 23:33 tmp -> /var/tmp
1049524 drwxr-xr-x 4 root root 4096 Oct 27 23:33 usr
1049525 drwxr-xr-x 3 root root 4096 Oct 27 23:33 var
1049526 -rw-r--r-- 1 root root 1450819 Oct 27 23:33 vmlinux.lz
1049527 drwxr-xr-x 4 root root 4096 Oct 27 23:33 webs
open etc/default.cfg
<User instance="2">
<Enable>TRUE</Enable>
<Level>2</Level>
<Username>root</Username>
<Password>dFRuMytaQCFTcjBPKwA=</Password>
</User>
base64 decode for password <Password> ; tTn3+Z@!Sr0O+
root:tTn3+Z@!Sr0O+
@rootcanman
Copy link

Hi, i got this router and can't use it because i am in turkmenistan.
Can't you to explain how can i use your find

@rootcanman
Copy link

Thank you!)))i got it

@dvtkrlbs
Copy link

dvtkrlbs commented Mar 4, 2019

it still doesnt allow this user on telnet or ftp ?
or is it completely disabled

@Delux06
Copy link

Delux06 commented Mar 24, 2019

Hello

TP LİNK Archer C5v AC1200 root password HELP ?

TR-069 protocol I have to close PlEASE CAN YOU HEKO ME

Picture attached : https://i.hizliresim.com/Baz98G.jpg

Model number: Archer C5v

Software Version:v1.7_180918

Hardware Version:Archer C5v v1 00000000

Help Detailed information Link : https://forum.donanimhaber.com/telekom-tp-link-archer-c5-firmware-update-root-sifre-yardim--136536703

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment