[jlbhfa]

hanno cambiato la password del file .kry già dalla versione beta

[miorouter]

io mi riferivo al vecchio kry che si osservava in xml decriptandolo con openssl 64 bit
openssl aes-256-cbc -K 65316532656263323039373831383630 -nosalt -iv 0 -d -in mio.kry -out mio.xml

mi domando se esiste una nuova chiave di cifratura e se fosse possibile conoscerla

non posso mica eseguire un brute force su tutti i 6 * 10^32  che magari non porterebbe a nulla

tipo

for /l %%i in (0, 1, 66316532656263323039373831383630) do openssl aes-128-cbc -K %%i -nosalt -iv 0 -d -in mio.kry -out .\estratto\mio%%i.xml

quindi mi domando se il fantomatico 66316532656263323039373831383630 per ADB o telecom raprresentasse qualcosa che potesse instradarmi su il nuovo sistema di cifratura del ADBAGConfig_aaaa-mm-gg

[supertommy]

io ho  AGPWI_4.0.4

[jlbhfa]

Codice: [Seleziona]

HELO
CPUI
L1CI
DRAM
----
PHYS
ZQDN
PHYE
DINT
LSYN
USYN
MSYN
LMBE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN


CFE version 1.0.37-106.5 for A4001 0013-locked BCM96328 (32bit,SP,BE)
Build Date: gio nov 25 17:41:15 CET 2010 ( root@tiglio2 )
Copyright (C) 2000-2009 Broadcom Corporation.

HS Serial flash device: name MX25L128E, id 0xc218 size 16384KB
Total Flash size: 16384K with 256 sectors
Chip ID: BCM6328B0, MIPS: 320MHz, DDR: 320MHz, Bus: 160MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 33554432 bytes (32MB)
Boot Address: 0xb8000000

Board IP address                  : 192.168.1.1:ffffff00 
Host IP address                   : 192.168.1.100 
Gateway IP address                :   
Run from flash/host (f/h)         : f 
Default host run file name        : vmlinux 
Default host flash file name      : bcm963xx_fs_kernel 
Boot delay (0-9 seconds)          : 1 
Board Id (0-1)                    : 96328avng 
Number of MAC Addresses (1-32)    : 13 
Base MAC Address                  : 02:10:18:01:00:01 
PSI Size (1-64) KBytes            : 64 
Enable Backup PSI [0|1]           : 1 
System Log Size (0-256) KBytes    : 256 
Main Thread Number [0|1]          : 0 
Voice Board Configuration (0-4)   : LE88276 

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
One only valid image tag found ...
Trying boot FIRST image copy (0x00000080) ...
 pucDst 0x80010000
 pucEntry 0x80010000
 dataLen 0x00000033
 pucSrc 0x8000200C
 latest imageSequence found: ... 1
 - Flash Kernel Address: 0xB80201AA
 - Tag->kernelLen: 0x00789E56
 - Flash Kernel Address: 0xB8020100
RMT image size: 78A000 pbase: B8020000 sectSize: 10000 n_image: 0 
image seq: [0][0][0][31]
Last Reading addr: B87A0000 img_size: A000 

MD5 over total file: 
28 11 95 63 9E CF 1A 83 95 8A D1 B3 4B A7 0B 8C 
Signature is > 49 65 FC 85 A6 1D 42 58 E0 0E 23 14 F8 33 4E 05 D4 4B 58 C2 6F F7 5C EC E4 91 06 EB F6 28 41 15 DC EC 3D E0 03 D8 E5 79 5D 8E 4C 72 6A DA 0A 4B C9 73 05 8F 2C AF 73 A6 3E EA 69 6D 2A E6 66 DC E9 5A 70 3A 37 EF 50 42 9F 75 90 70 BA AF 2C AC 79 7C BA 34 76 20 5F 8D 80 29 C4 C6 DD 28 F7 CB EF 58 FE 0E BE 56 F2 0D EB CA 46 1C C2 45 3D 60 CC 60 EF 2D 8E 03 02 F2 59 A3 27 E1 98 5D 7E B0
MD5 - decrypted checksum is  :  
28 11 95 63 9E CF 1A 83 95 8A D1 B3 4B A7 0B 8C 

SGP DIGITAL SIGNATURE VERIFIED !
Decompression OK! - starting 1
Entry at 0x80006000
Flash head.s at 0xb80241aa

Distribution: DW_96328
Version: AGPWI_4.0.5

Build Date: 2015/06/05-13:47

Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x80006000
 Start Partition: 0
Uncompressing Linux...........................Ok
Booting the kernel
FLASH ENTRY POINT: : 0xB802955A
[    0.000000] Linux version 2.6.30 (f.mingozzi@quelo) (gcc version 4.3.3 (GCC) ) #1 Fri Jun 5 13:46:57 CEST 2015

[    0.000000] HS Serial flash device: name MX25L128, id 0xc218 size 16384KB

[    0.000000] 96328avng prom init

[    0.000000] CPU revision is: 0002a075 (Broadcom4350)

[    0.000000] DSL SDRAM reserved: 0x100000

[    0.000000] Determined physical RAM map:

[    0.000000]  memory: 01f00000 @ 00000000 (usable)

[    0.000000] Zone PFN ranges:

[    0.000000]   DMA      0x00000000 -> 0x00001000

[    0.000000]   Normal   0x00001000 -> 0x00001f00

[    0.000000] Movable zone start PFN for each node

[    0.000000] early_node_map[1] active PFN ranges

[    0.000000]     0: 0x00000000 -> 0x00001f00

[    0.000000] On node 0 totalpages: 7936

[    0.000000] free_area_init_node: node 0, pgdat 802aa560, node_mem_map 81000000

[    0.000000]   DMA zone: 32 pages used for memmap

[    0.000000]   DMA zone: 0 pages reserved

[    0.000000]   DMA zone: 4064 pages, LIFO batch:0

[    0.000000]   Normal zone: 30 pages used for memmap

[    0.000000]   Normal zone: 3810 pages, LIFO batch:0

[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 7874

[    0.000000] Kernel command line: ro noinitrd console=ttyS0,115200 init=/sbin/init

[    0.000000] wait instruction: enabled

[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 16 bytes.

[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes

[    0.000000] NR_IRQS:128

[    0.000000] PID hash table entries: 128 (order: 7, 512 bytes)

[    0.000000] console [ttyS0] enabled

[    0.001000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)

[    0.002000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)

[    0.005000] Memory: 28440k/31744k available (2194k kernel code, 3304k reserved, 474k data, 120k init, 0k highmem)

[    0.006000] Calibrating delay loop... 319.48 BogoMIPS (lpj=159744)

[    0.028000] Mount-cache hash table entries: 512

[    0.029000] --Kernel Config--

[    0.030000]   SMP=0

[    0.031000]   PREEMPT=0

[    0.032000]   DEBUG_SPINLOCK=0

[    0.033000]   DEBUG_MUTEXES=0

[    0.038000] net_namespace: 1124 bytes

[    0.040000] NET: Registered protocol family 16

[    0.043000] Total Flash size: 16384K with 4096 sectors

[    0.044000] Flash not used for Auxillary File System

[    0.375000] registering PCI controller with io_map_base unset

[    0.376000] registering PCI controller with io_map_base unset

[    0.386000] bio: create slab <bio-0> at 0

[    0.389000] usbcore: registered new interface driver usbfs

[    0.390000] usbcore: registered new interface driver hub

[    0.391000] usbcore: registered new device driver usb

[    0.393000] pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff]

[    0.394000] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff]

[    0.396000] pci 0000:01:00.0: PME# supported from D0 D3hot

[    0.397000] pci 0000:01:00.0: PME# disabled

[    0.398000] pci 0000:02:00.0: reg 10 64bit mmio: [0x000000-0x003fff]

[    0.399000] pci 0000:02:00.0: supports D1 D2

[    0.403000] pci 0000:01:00.0: PCI bridge, secondary bus 0000:02

[    0.404000] pci 0000:01:00.0:   IO window: disabled

[    0.405000] pci 0000:01:00.0:   MEM window: 0xa0000000-0xa00fffff

[    0.406000] pci 0000:01:00.0:   PREFETCH window: disabled

[    0.407000] PCI: Enabling device 0000:01:00.0 (0000 -> 0002)

[    0.408000] PCI: Setting latency timer of device 0000:01:00.0 to 64

[    0.410000] BLOG Rule v1.0 Initialized

[    0.411000] Broadcom IQoS v0.1 Jun  5 2015 13:46:55 initialized

[    0.412000] Broadcom GBPM v0.1 Jun  5 2015 13:46:55 initialized

[    0.413000] NET: Registered protocol family 8

[    0.414000] NET: Registered protocol family 20

[    0.419000] NET: Registered protocol family 2

[    0.424000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)

[    0.433000] TCP established hash table entries: 1024 (order: 1, 8192 bytes)

[    0.441000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)

[    0.447000] TCP: Hash tables configured (established 1024 bind 1024)

[    0.454000] TCP reno registered

[    0.457000] NET: Registered protocol family 1

[    0.465000] squashfs: version 4.0 (2009/01/31) Phillip Lougher

[    0.471000] squashfs: version 4.0 with LZMA457 ported by BRCM

[    0.477000] msgmni has been set to 55

[    0.484000] io scheduler noop registered (default)

[    0.490000] pcieport-driver 0000:01:00.0: device [14e4:6328] has invalid IRQ; check vendor BIOS

[    0.499000] PCI: Setting latency timer of device 0000:01:00.0 to 64

[    0.513000] PPP generic driver version 2.4.2

[    0.518000] PPP Deflate Compression module registered

[    0.524000] PPP BSD Compression module registered

[    0.528000] NET: Registered protocol family 24

[    0.534000] Current image: 0

[    0.553000] Creating 11 MTD partitions on "bcm963xx mtd map driver":

[    0.560000] 0x0000b8000000-0x0000b8020000 : "CFE"

[    0.567000] 0x0000b8020000-0x0000b8120000 : "kernel_1"

[    0.574000] 0x0000b8120000-0x0000b87c0000 : "rootfs_1"

[    0.581000] mtd: partition "rootfs_1" set to be root filesystem

[    0.587000] 0x0000b8020000-0x0000b87c0000 : "image_1"

[    0.594000] 0x0000b87c0000-0x0000b8800000 : "conf_fs"

[    0.600000] 0x0000b8800000-0x0000b8810000 : "kernel_2"

[    0.607000] 0x0000b8800000-0x0000b8810000 : "rootfs_2"

[    0.614000] 0x0000b8800000-0x0000b8fa0000 : "image_2"

[    0.621000] 0x0000b8fa0000-0x0000b8fe0000 : "conf_rg_main"

[    0.628000] 0x0000b8fe0000-0x0000b8ff0000 : "conf_factory"

[    0.636000] 0x0000b8000000-0x0000b9000000 : "flash"

[    0.643000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver

[    0.649000] PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)

[    0.655000] PCI: Setting latency timer of device 0000:00:0a.0 to 64

[    0.662000] ehci_hcd 0000:00:0a.0: EHCI Host Controller

[    0.668000] ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1

[    0.676000] ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM

[    0.702000] ehci_hcd 0000:00:0a.0: irq 50, io mem 0x10002500

[    0.713000] ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00, overcurrent ignored

[    0.721000] usb usb1: configuration #1 chosen from 1 choice

[    0.728000] hub 1-0:1.0: USB hub found

[    0.732000] hub 1-0:1.0: 1 port detected

[    0.738000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver

[    0.744000] PCI: Enabling device 0000:00:09.0 (0000 -> 0002)

[    0.750000] PCI: Setting latency timer of device 0000:00:09.0 to 64

[    0.757000] ohci_hcd 0000:00:09.0: OHCI Host Controller

[    0.763000] ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2

[    0.770000] ohci_hcd 0000:00:09.0: irq 49, io mem 0x10002600

[    0.831000] usb usb2: configuration #1 chosen from 1 choice

[    0.838000] hub 2-0:1.0: USB hub found

[    0.842000] hub 2-0:1.0: 1 port detected

[    0.848000] brcmboard: brcm_board_init entry

[    0.852000] SES: Button Interrupt 0x1 is enabled

[    0.857000] sesBtn_mapIntr: is_sesBtn_irq_shared=0, sesBtn_irq=1

[    0.863000] SES: LED GPIO 0x8009 is enabled

[    0.867000] bcm963xx-flash.0: failed to claim resource 0

[    0.873000] brcm_board_init: isShared=0, rstToDflt_irq=0

[    0.879000] Serial: BCM63XX driver $Revision: 3.00 $

[    0.885000] Magic SysRq enabled (type ^ h for list of supported commands)

[    0.893000] ttyS0 at MMIO 0xb0000100 (irq = 36) is a BCM63XX

[    0.899000] ttyS1 at MMIO 0xb0000120 (irq = 47) is a BCM63XX

[    0.905000] RXBds: use low memory values (32M)

[    0.910000] Total # RxBds=404

[    0.913000] bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized

[    0.913000]

[    0.921000] bcmxtmrt: Broadcom BCM6328B0 ATM/PTM Network Device v0.3 Jun  5 2015 13:46:52

[    0.932000] TCP cubic registered

[    0.935000] Initializing XFRM netlink socket

[    0.940000] NET: Registered protocol family 17

[    0.944000] NET: Registered protocol family 15

[    0.949000] Bridge firewalling registered

[    0.953000] Ebtables v2.0 registered

[    0.957000] ebt_time registered

[    0.961000] ebt_ftos registered

[    0.964000] ebt_wmm_mark registered

[    0.967000] 802.1Q VLAN Support v1.8 Ben Greear <[email protected]>

[    0.974000] All bugs added by David S. Miller <[email protected]>

[    0.987000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.

[    0.995000] Freeing unused kernel memory: 120k freed


init started: BusyBox v1.17.3 (2015-06-05 13:32:30 CEST)

init: setting virtual memory limit 8388608 -1

Starting /etc/rc.d/S10boot.sh ...
mount usb...
Restore passwd ....
Restore group ....
Fri Jun  5 11:35:27 UTC 2015
Starting /etc/rc.d/S11services.sh ...

Please press Enter to activate this console.

 --  Base System Init  [3.40]

[*] Starting Event Controller
[*] Loading Drivers and Kernel Modules
[*] Starting Configuration Load
[    4.084000] ip_tables: (C) 2000-2006 Netfilter Core Team

[*] Starting Configuration Manager (B)
[    4.807000] bcm_bpm: module license 'unspecified' taints kernel.

[    4.813000] Disabling lock debugging due to kernel taint

[    4.830000] BPM: tot_mem_size=33554432B (32MB), buf_mem_size=1677720B (1MB), num of buffers=765, buf size=2192

[    4.863000] Broadcom BPM Module Char Driver v0.1 Jun  5 2015 13:32:22 Registered<244>

[    5.105000] nf_conntrack version 0.5.0 (496 buckets, 1984 max)

[    5.112000] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use

[    5.120000] nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or

[    5.128000] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.

[    5.851000] bcmxtmcfg: bcmxtmcfg_init entry

[    6.476000] adsl: adsl_init entry

We all love YAPS
[    6.834000] yaffs: fs is empty

[    6.962000] Broadcom BCM6328B0 Ethernet Network Device v0.1 Jun  5 2015 13:35:33

[    6.973000] ETH Init: Ch:0 - 100 tx BDs at 0xa17f5000

[    6.978000] ETH Init: Ch:0 - 306 rx BDs at 0xa194e000

[    6.985000] [0] Allocating 306 skb

[    7.054000] dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered

[    7.096000] eth0: MAC Address: 02:10:18:01:00:01

[    7.119000] eth1: MAC Address: 02:10:18:01:00:01

[    7.144000] eth2: MAC Address: 02:10:18:01:00:01

[    7.159000] eth3: MAC Address: 02:10:18:01:00:01

[    7.314000] eth3 Link UP 100 mbps full duplex

[    8.149000] NET: Registered protocol family 10

[    8.194000] lo: Disabled Privacy Extensions

[    8.210000] ADDRCONF(NETDEV_UP): bcmsw: link is not ready

[    8.639000] eth3 Link DOWN.

[    8.889000] SCSI subsystem initialized

[    9.576000] zram: num_devices not specified. Using default: 1

[    9.582000] zram: Creating 1 devices ...

[    9.743000] Driver 'sd' needs updating - please use bus_type methods

[   10.175000] wl: dsl_tx_pkt_flush_len=338

[   10.179000] wl: high_wmark_tot=497

[   10.229000] PCI: Enabling device 0000:02:00.0 (0000 -> 0002)

[   10.235000] wl: passivemode=1

[   10.238000] wl: napimode=0

[   10.241000] wl0: allocskbmode=1 currallocskbsz=256

[   10.309000] sprom_read_pci: buf[0] = 0xffff, returning bad-crc

[   10.356000] sprom_read_pci: buf[0] = 0xffff, returning bad-crc

[   10.373000] sprom_read_pci: buf[0] = 0xffff, returning bad-crc

[   10.379000] wl:srom/otp not programmed, using main memory mapped srom info(wombo board)

[   10.612000] wl:loading /etc/wlan/bcm43225_map.bin

[   10.670000] srom rev:8

[   10.775000] wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=16

[   10.862000] wl0: pqc 16 - size  tot 1368

[   10.866000]  * pkt queue base:    128

[   10.866000]  * data HI watermark: 50

[   10.866000]  * PS queue:          1140

[   10.936000] wl0: Broadcom BCMa8d8 802.11 Wireless Controller 6.30.102.7.cpe4.12L07.0

[   10.979000] dgasp: kerSysRegisterDyingGaspHandler: wl0 registered

[   11.331000] xt_time: kernel timezone is -0000

[   12.160000] ip6_tables: (C) 2000-2006 Netfilter Core Team

[   12.961000] usbcore: registered new interface driver usblp

-  CM TR-181 ready
[Configuration Load ready]
[*] Starting System Log
[System Log ready]
[*] Starting LEDs (B)
[flash_conf.c read_header:212] ERROR Wrong magic number (sector 0): 0x434F4E46 [correct is 0xFEEDBABE]
[flash_conf.c read_header:212] ERROR Wrong magic number (sector 1): 0xFFFFFFFF [correct is 0xFEEDBABE]
[flash_conf.c flash_read:799] ERROR Can't load valid configuration!
[   15.953000] board: low_power to 0 (get_stopUpdate_status()=0)

[   15.960000] board: set low_power to 4

[*] Cleaning dynamic entries...
[LEDs (B) ready]
[*] Probing for usb devices...
[*] Epicentro Software Version: AGPWI_4.0.5
[*] Epicentro Platform Version: AGPWI_4.0.0_0027
[*] Starting PowerManagement
[   17.963000] DDR Self Refresh pwrsaving is enabled

[   18.022000] Host MIPS Clock divider pwrsaving is enabled

[PowerManagement ready]
[*] Starting Swap Disk (RAM)
[Swap Disk (RAM) ready]
[   18.296000] Adding 2180k swap on /dev/zram0.  Priority:-1 extents:1 across:2180k SS

- Init DSL Line
[   18.742000] XTM Init: 300 rx BDs at 0xa049c000

[   18.749000]  xtm: allocating 300 skbs for channel 0

[   19.226000] *** dslThread dslPid=966

[   19.233000] BcmAdsl_Initialize=0xC021C0AC, g_pFnNotifyCallback=0xC0244304

[   19.513000] pSdramPHY=0xA1FFFFF8, 0x6FFBD9FD 0x3F57BFF5

[   19.518000] *** XfaceOffset: 0x21F90 => 0x21F90 ***

[   20.140000] *** PhySdramSize got adjusted: 0x90870 => 0xA693C ***

[   20.146000] AdslCoreSharedMemInit: shareMemSize=366237(366240)

[   20.160000] AdslCoreHwReset:  pLocSbSta=80568000 bkupThreshold=1600

[   20.166000] AdslCoreHwReset:  AdslOemDataAddr = 0xA1F8526C

[   20.172000] adsl: forced boardId 96328avng2

[   20.176000] adsl: updating afeId from 1040a100 to 1040a200

[   20.182000] ***BcmDiagsMgrRegisterClient: 0 ***

[   20.187000] dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered

[*] InterfaceMonitor Init
[*] Starting Firewall
[Firewall ready]
[*] Starting QoS
[QoS ready]
[   30.417000] Initializing USB Mass Storage driver...

[   30.423000] usbcore: registered new interface driver usb-storage

[   30.429000] USB Mass Storage support registered.



 --  Prepare Networking  [30.43]

- Init USB Interfaces
- Init Bridges (0)
[   31.398000] device eth3 entered promiscuous mode

[   31.428000] device eth2 entered promiscuous mode

[   31.456000] device eth1 entered promiscuous mode

[   31.485000] device eth0 entered promiscuous mode

[   31.516000] device wl0 entered promiscuous mode

[   31.538000] device wl0.1 entered promiscuous mode

BridgingBridge: eth3: *(add)*-> [eth3_br1]
[   37.982000] device eth3_br1 entered promiscuous mode

BridgingBridge: eth2: *(add)*-> [eth2_br1]
[   38.260000] device eth2_br1 entered promiscuous mode

BridgingBridge: eth1: *(add)*-> [eth1_br1]
[   38.508000] device eth1_br1 entered promiscuous mode

BridgingBridge: eth0: *(add)*-> [eth0_br1]
[   38.706000] device eth0_br1 entered promiscuous mode



 --  Start Networking  [40.32]

[*] Starting DHCP server
[*] LAN Ethernet Interfaces - Power UP! (B)
[*] Starting Filtering
[eth3] up
[eth2] up
[eth1] up
[eth0] up
### Executing <echo 0 > /proc/hwswitch/default/enabled> ###
[DHCP server ready]
[   42.787000] eth3 Link UP 100 mbps full duplex

[   44.554000] br0: port 1(eth3) entering forwarding state

[   44.561000] br1: port 1(eth3_br1) entering forwarding state

[Filtering ready]
[*] Starting Captive Portal
[Captive Portal ready]
[*] Starting NAT
[NAT ready]
[*] Starting Port Mapping
[Port Mapping ready]
[*] Starting IPv6 services
- Radvd start
- DHCPv6 init
[*] Starting DNS client
[DNS client ready]


 --  Start Network Services  [51.03]

[*] Starting DNS forwarder
[DNS forwarder ready]
[*] Starting IGMP proxy

Login: [IGMP proxy ready]
[*] Starting SAMBA filesharing service
[SAMBA filesharing service ready]
[*] Starting CUPS printer sharing service
[CUPS printer sharing service ready]
[*] Starting Wifi Protected Setup service (B)
[*] Starting PPPoE proxy
[PPPoE proxy ready]
[*] Starting WiFi Radio (B)
[   57.718000] br0: port 5(wl0) entering forwarding state


Login:
Login:
Login: admin
Password: ### WiFiPowerMng ###
[WiFi Radio ready]
[*] Starting VOIP services (B)
[*] Starting TR-069 agent (B)
[TR-069 agent (B) ready]


 --  System Ready  [69.67]


Starting /etc/rc.d/S20voip.sh ...
Starting /etc/rc.d/S50telnet ...
Starting /etc/rc.d/S71ti.sh ...
Starting /etc/rc.d/S95done ...adesso c'è il 4.0.5
allora dopo aver fatto un bel dump della flash, ho fermato tramite seriale la cfe dato un bel
e all
e caricato il fw agpwi_4.05.

[BigNerd95]

Questa è la nuova key usata per crittare i file kry
a0dd1da4242d32424fdffaa0ed0e0f12
Con questo comando
openssl aes-128-cbc -K a0dd1da4242d32424fdffaa0ed0e0f12 -nosalt -iv 0 -d -in ADBAGConfig_2015-06-05T144635.kry -out asd.xml
dovresti riuscire a decrittarlo

[fulmine500]

è cosa nota da quasi un mesetto
https://www.ilpuntotecnico.com/forum/index.php/topic,75575.msg206191.html#msg206191

inoltre è stato realizzato un tool grafico per il decrypt facilitato
https://www.ilpuntotecnico.com/forum/index.php/topic,75658.0.html

in ogni caso, grazie per la segnalazione

[BigNerd95]

Ah ottimo! Cercando non avevo trovato nulla, così ho scompattato il firmware con binwalk e l'ho scoperta
In ogni caso meglio così

[Franc3sco88]

Salve a tutti, volevo sapere se poi qualcuno è riuscito a sbloccarlo o ritornare alla versione precedente della 4.0.1

Attualmente ho un modem con Release: AGPWI_4.0.4

[Miguel89]

Se il tuo router è abbastanza vecchio gli puoi caricare un fw precedente, ad esempio il fw 1.0.4rx e poi sbloccarlo seguendo la mia guida...

Al riavvio se non si avvia correttamente fai un reset di fabbrica

Se non va prova a caricare la mia immagine di ripristino della guida per tornare al fw Telecom

Se nel tuo router c'è l'ultimo CFE credo che non sarai in grado di caricare queste immagini

[Gibo65]

Ciao,

torno a bomba con lo sblocco su questo router versione Business (senza antenne), in quanto ho tentato lo sblocco con ponticello senza successo! (fw già 4.0.1) :-(
Quello che vorrei riuscire a fare é la modifica per l'ottenimento del prot PPPoE e PPPoA ed eventualmente l'upgrade del driver DSL.

Devo forse fare il downgrade ad una delle prime versioni ?
...ma poi questo modello riesce ad usare entrambi i protocolli PPPoA e PPPoE? 

https://mega.nz/#!Igk3RARZ!_NjYCGay8PxZB41v5EUWIDwWplPwRdPTWR_kMMbtjiw

[Miguel89]

Segui la mia guida:
https://www.ilpuntotecnico.com/forum/index.php/topic,73760.0.html
e i consigli che ho scritto nel post prima del tuo

[Pior]

Seguendo la guida ho salvato la configurazione del mio modem con firmware AGPWI_4.0.4 e quindi ho decryptato il file, modificato i dns nel file xml e quindi cryptato di nuovo il file e ripristinato sul modem. Niente da fare, come per magia rimangono i dns preimpostati Telecom 

[Miguel89]

Se lo vuoi sbloccare prova a seguire la mia guida... Se il tuo router non è molto recente (se non aveva già un fw 4.x.x di fabbrica) si può montare un fw alternativo!

In caso contrario c'è bisogno della seriale per sbloccarlo

[alfy81]

@Miguel89

Ciao Miguel,
anche io ho il modem Alice ADSL2+ wifi n (AGPWI) senza antenne, diciamo che c'è l'ho dal 2015, uscito con la versione 1.1.0, proprio ieri ho provato a sbloccarlo col metodo PONTICELLO provando a installare un firmware alternativo della COMTREND ma nulla, non accetta questi tipi di firmware con estenzione .bin, poi invece ho provato a installargli l'ultima versione ufficiale originale, la 4.0.6 ed è andata liscia, tutto perfetto.

Adesso ti chiedo, per poterlo sbloccare, ormai ho molta dimestichezza con metodo PONTICELLO, potrei fare un downgrade alla versione 1.0.3 e sbloccare almeno il menù avanzato ?
Una volta sbloccata la versione 1.0.3 posso installare qualsiasi firmware alternativo ?
Ti ringrazio.

saluti,
Alfonso