Sercomm-API icon indicating copy to clipboard operation
Sercomm-API copied to clipboard

Password for Telnetd on RC8221 (Home by SFR)

Open Jezza34000 opened this issue 3 years ago • 5 comments

Hello, Someone have the password for root account in telnetd ? The one who is provided in this repo is not working on this model... Thank YOU

Jezza34000 avatar Aug 17 '22 19:08 Jezza34000

There's a guide which shows how the password was discovered at https://shkspr.mobi/blog/2017/11/telnet-and-root-on-the-sercomm-icamera2/

It might also work with your model.

edent avatar Aug 17 '22 19:08 edent

Hi Edent ! Thank you for you fast answer. And thank you for your repo, with this one i could have done a plugin for jeedom (french domotique system) it was so helpful ! 👍 About your link, i already read those post, i use Ghidra to reverse engineering the rc.sethost file coming from my dumped firmware.

But i'm stuck, i got those code :

code

I'm not able to find what it could write inside the passwd file

Jezza34000 avatar Aug 17 '22 20:08 Jezza34000

OK i got it. I found the way to avoid DES hash, i patch it and i got :

Password : Aq2!0025

But dosent work :-(

Jezza34000 avatar Aug 18 '22 11:08 Jezza34000

Which username did you use? Might be worth trying a few different one, root, admin, Administrator etc.

edent avatar Aug 18 '22 15:08 edent

I have tried everything. The only one who is accepted is the admin one but i got a message :

CGI Error!
403 Forbidden

I think it's not available on that model...

Jezza34000 avatar Aug 18 '22 16:08 Jezza34000