[nanobahr]

hello everyone
this is my first post here at hack forums , at the last 7 days i downloaded a new firmware to update my router and after uploading it successfully to my router i was surprised that the username and password not working even after hard reset of my router to factory default still user and password not working .
is there any way to get the default admin or root user and password from the firmware file ?

[f1re_w1re]

What's the model of your router?

You can also try to use BinWalk if you want to decompile firmware files. It may yield useful information.

[Asdethprime]

Possible yes, likely you can do it? not so much.

Reversing a whole router firmware is not a simple thing man.

[nanobahr]

What's the model of your router?

You can also try to use BinWalk if you want to decompile firmware files. It may yield useful information.

huawei HG658 V2 Hardware version: VER.A

---

Possible yes, likely you can do it? not so much.

Reversing a whole router firmware is not a simple thing man.

thanks a lot ,,, that means that i lost my router and can't get benefit of it anymore ?

[Zeda]

huawei HG658 V2  Hardware version: VER.A

---

thanks a lot ,,, that means that i lost my router and can't get benefit of it anymore ?

Just try the usual default passes.

[f1re_w1re]

huawei HG658 V2  Hardware version: VER.A

---

thanks a lot ,,, that means that i lost my router and can't get benefit of it anymore ?

https://www.cleancss.com/router-default/Huawei/HG658

[CyberStrike]

Firmware updates have generally a default config, which is updated by what is on your router. ( I am looking for this firmware right now) Generally you will find some passwords/comments in the firmware you will use binwalk to extract the firmware, and use cat/grep/cut/less or sed/awk to parse through the files. From what I have found there is a path traversal vulnerability (perhaps) on this router ( http://router.IP.HE.RE/images/.../...//....currentcfg ) which may still work. Firmware is one of those things which companies use canned ready to go solutions so who knows it's worth a shot. There is a "dumper" although not sure on authentication

https://github.com/Cristi075/HG658b_data_dumper

I really would say make an effort and hold the reset button for 30 seconds then start going out and trying different things.

[nanobahr]

nothing of those default usernames and passwords working , thanks for trying helping me .

---

Firmware updates have generally a default config, which is updated by what is on your router. ( I am looking for this firmware right now) Generally you will find some passwords/comments in the firmware you will use binwalk to extract the firmware, and use cat/grep/cut/less or sed/awk to parse through the files. From what I have found there is a path traversal vulnerability (perhaps) on this router which may still work. Firmware is one of those things which companies use canned ready to go solutions so who knows it's worth a shot. There is a "dumper" although not sure on authentication

I really would say make an effort and hold the reset button for 30 seconds then start going out and trying different things.

i tried that script and only got wrong message " ERROR: Failed to obtain data. Your router is not vulnerable to the path traversal attack "

---

also tried to use hard reset button but it's do nothing the firmware stay and i cant login to configure my router , so i wish i can post the link of that specific firmware at least to get someone help me to crack it and get the default root username and password .

[CyberStrike]

So probably your update patched the path traversal, the firmware will stay even after a reset but the password stays the same? Usually when pressing that reset it will put it to default. After pressing the button did you get disconnected from the internet/router?

[nanobahr]

So probably your update patched the path traversal, the firmware will stay even after a reset but the password stays the same? Usually when pressing that reset it will put it to default. After pressing the button did you get disconnected from the internet/router?

no all router led stay working and still able to ping at 192.168.1.1 which is the router ip with no request time out

[CyberStrike]

no all router led stay working and still able to ping at 192.168.1.1  which is the router ip with no request time out

Connect via ethernet the no response makes me wonder if it's bricked?! Rare now a days but I am sure it still happens, firmware/bios updates used to be really a pucker moment in my life.

[nanobahr]

Connect via ethernet the no response makes me wonder if it's bricked?! Rare now a days but I am sure it still happens, firmware/bios updates used to be really a pucker moment in my life.

tried so many times and it's not resetting , the weird thing is that when i updated firmware i tried to use my old password but it didn't work that means the new firmware reset old configure on its own .

[CyberStrike]

tried so many times and it's not resetting , the weird thing is that when i updated firmware i tried to use my old password but it didn't work that means the new firmware reset old configure on its own .

Are you able to even connect via wifi, it really might be bricked. It's not responding to pings that kind of is a tip off that something is going poorly.

[nanobahr]

Are you able to even connect via wifi, it really might be bricked. It's not responding to pings that kind of is a tip off that something is going poorly.

i can't connect through wifi cause it's been reset too by the firmware update cause the ssid name changed and so the password was changed to so i'm connected to it through cable but i can't login to configure my internet settings .

[CyberStrike]

i can't connect through wifi cause it's been reset too by the firmware update cause the ssid name changed and so the password was changed to so i'm connected to it through cable but i can't login to configure my internet settings .

Like I said try ethernet (physically connect via ethernet) if you have done this and still it is not responding it might just be bricked.