Blog Jaune

Comments for article Cracker sa bbox

Le 04/02/2010 à 23:56

Source et informations complémentaires 

La source principale se trouve à cette adresse (mais le programme proposé est inintéressant). Les autres sources sont au détour du web. J'aurais du les noter…

Principe de fonctionnement plus en détail, vu sur la source:

 The format of a serial number:

   CP YY WW PP XXX (CC)

   And from what i can tell of the following serial number taken from 
   router i received.

   CP 06 15 JT 109 (53)

   YY is the year produced.      ( 2006  ) ?
   WW is the week of year.       ( some week of April ) ?
   PP is the production code.    ( JT ) factory code?
   CC is the configuration code. ( 53 ) seems to be 00 - ZZ (0-9/A-Z)

   I can only guess that the XXX values represent the unit number

   **************************************************************************

   The key generation is simple enough.

   Take as example: "CP0615JT109 (53)"

   Remove the CC and PP values

     "CP0615109"

   Convert the XXX values to hexadecimal.

     "CP0615313039"

   Process with SHA-1

     742da831d2b657fa53d347301ec610e1ebf8a3d0

   The last 3 bytes are converted to 6 byte string, and appended to
   the word "SpeedTouch" which becomes the default SSID.

     "SpeedTouchF8A3D0"

   The first 5 bytes are converted to a 10 byte string which
   becomes the default WEP/WPA key.

    "742DA831D2"

   Thats it..
Ajouter un commentaire







Image de confirmation