Tutorial: Extract OGERO router and PPPoE Username and Pass

Kareem · 2009-10-11T04:14:57+00:00

This tutorial is not about any ILLEGAL activity as we are here breaking the security of OUR router and OUR connection so please Samer do not delete it. We h...

Kareem

55028 Jun 29 1971 user.ini how could iy be empty

belal

no idea. i am going to try it on windows xp. it should work...give me a sec plz

belal

kamen empty..

Kareem

can you paste the output of ls command in the dl directory please?

belal

i didnt understand..where should i paste the output of the command? in that user.ini file?

Kareem

btw I was reading something..can't you just login to your router using IE then Home > SpeedTouch > Configuration > Backup & Restore and save a configuration file ?

Kareem

belal wrotei didnt understand..where should i paste the output of the command? in that user.ini file?

if you go to /dl and you type ls, what is the output.

belal

btw I was reading something..can't you just login to your router using IE then Home > SpeedTouch > Configuration > Backup & Restore and save a configuration file ?

holy crap!! it worked! :D

password=_DEV_AF8F30DEB758558F status=enabled
could you decode it for me please?

Kareem

Hold on please.

Kareem

I think that it was hashed against the serial number. Anyway we can try this.

Press Disconnect so that the password is shown with **** and then put this on the address bar and press enter.

javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f.type.toLowerCase() == "password") s += f.value + "\n"; } } if (s) alert("Kwdikoi pou vrethikan:\n\n" + s); else alert("Den yparxoun formes kwdikwn s afti ti selida.");})();

belal

Kareem

where is the password shown ? as ****

belal

sorry.
here it is:(btw i cannot paste anything in that small window 's address bar. the only choice is to 'copy'..check it:(these alcatel fags know how to work!:S) & the password is always blank there . mafi *****..

Kareem

IF you telnet to your router, can you execute the command EXPERT ?

belal

No.it seems my firmware is updated!!

Kareem

grrr.. I will keep on searching but it seems a bit complex. unless someone here has decrypted similar type of passwords. AFAIK hash is one way encryption and the device is using the serial number to encrypt the pass.

belal

3azabtak man,sorry i wasted you time, thank you for your efforts :)

Kareem

Nah im not gonna stop, we keep on reading. Ill post some updates as soon as I find anything interesting.

Kareem

Values starting with _DEV_
Is a reversibly device-dependent encrypted value. Is a device-dependent reversibly encrypted value. This encryption is used for This encryption is used for
saving sensitive values that should not be re-used on another SpeedTouch™ saving sensitive values that should not be re-used on another SpeedTouch ™
device, yet for which the clear-text value must be retrievable for the Speed- device, yet for which the clear-text value must be retrievable for the Speed -
Touch™ device eg the PPP password. Touch ™ device eg the PPP password.
The encryption algorithm is unique for each individual SpeedTouch ™. Configuration
files with _DEV_ values for variables can only be used by the SpeedTouch™ files with _DEV_ values for the variables can only be used by the SpeedTouch ™
device the _DEV_ value was originally generated on.

belal

Press Disconnect so that the password is shown with **** and then put this on the address bar and press enter.

javascript:(function(){var s,F,j,f,i; s = ""; F = document.forms; for(j=0; j<F.length; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f.type.toLowerCase() == "password") s += f.value + "\n"; } } if (s) alert("Kwdikoi pou vrethikan:\n\n" + s); else alert("Den yparxoun formes kwdikwn s afti ti selida.");})();

Kareem, it worked!!!!!!!!!!!!!!!! thank youuuuuu!!!!

« Previous Page Next Page »