Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

defaultInputKey #3

Open
altineller opened this issue Mar 13, 2023 · 4 comments
Open

defaultInputKey #3

altineller opened this issue Mar 13, 2023 · 4 comments

Comments

@altineller
Copy link

what is the default input key in:

https://github.com/boginw/zyxel-vmg8825-keygen/blob/master/common/config.py

that is:

defaultInputKey = "inputKey"

I understand that it will not affect method 2 and 3, but what is it used for.

Secondly, how can we calculate the password for admin, (since it is already known)

Best Regards,
Can

@boginw
Copy link
Owner

boginw commented Mar 14, 2023

The firmware has some methods which accept an input key. Changing the input key also changes the output. You can think of it as a seed for the methods. However, in all cases which I have seen, the input key is always hard-coded to inputKey, which makes it a bit useless. One such hard-coded input key can be found in initPasswords in the firmware.

I don't understand the second part of your question. Could you clarify what you mean by “how can we calculate the password for admin”?

@altineller
Copy link
Author

Hello @boginw

What I meant is, admin password is known, it is written at the back of the modem. So just like we calculate the supervisor/root password, maybe we can calc it for admin, compare the result to known password, to see if we got it right.

Best Regards,
Can

@boginw
Copy link
Owner

boginw commented Mar 16, 2023

That is certainly possible, and something I would like to achieve here too. But one reason why that is not a priority is that it has been done before. Please see @luc10's zykgen. It works perfectly.

@drsn00ker
Copy link

PlumLulz has published the python version of zykgen (and a lot of other zyxel WIFI password algos)
https://github.com/PlumLulz/zykgenpy

The wifi passwords (param 2) from the emulator are covered by zykgen. Wifi password param 0 and 1 are part of the sbg3500 algo.
Param 2-0 is cocktail 11 for me. I don't think plum has that one updated yet.
haystack='CIKOPSUVWXZ'; % invalid chars
charset='0123456789ABDEFGHJLMNQRTY'; % valid chars

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants