sfasf

Hocam modemi yakmamı engelleyen tek şey elimdeki tek DSL modem olması. SCP bağlanmıyor WGET bağlanmıyor. Arayüzde yetki yüksek terminalde düşük. Fiber gelene kadar idare edeyim gelince UART'tan bağlanıp istediğimiz şeyi çekeriz.
Modemi yakmamaya direnmeye çalışmanız harika. 😂 Bu bize aslında bu rootlama işine ne kadar destek verdiğinizi gösteriyor. Şu an geçerken terminalden hiç özel şeyler alamıyor muyuz?
 
Son düzenleyen: Moderatör:
Modemi yakmamaya direnmeye çalışmanız harika. 😂 Bu bize aslında bu rootlama işine ne kadar destek verdiğinizi gösteriyor. Şu an geçerken terminalden hiç özel şeyler alamıyor muyuz?
Çoğunlukta yetki hatası veriyor birkaçında sansürlü veri getiriyor daha output.txt'lere bakamadım bile. Kodu gözden geçirmem lazım,bi yerde hata yapmışım. Arayüzün yetkisi yüksek iken terminalde yetkim düşük bir üst kullanıcıya geçmem gerek.
 
Çoğunlukta yetki hatası veriyor birkaçında sansürlü veri getiriyor daha output.txt'lere bakamadım bile. Kodu gözden geçirmem lazım,bi yerde hata yapmışım. Arayüzün yetkisi yüksek iken terminalde yetkim düşük bir üst kullanıcıya geçmem gerek.
Her tuşa basıyoruz. Bakalım GitHub kullanıcıları ne derecede ilgi gösterecek? Bir dönüş olur mu dersiniz?

Screenshot_20260706-010735.webp
 
Son düzenleyen: Moderatör:
Huawei'den hallice bunlarda da her şey kapalı kutu. Hocam aciliyet durumu varsa modemi bilgisayar olan yere götürüp Root atsan olmadı Android bir cihaza USB ethernet takıp denesen.
Hocam, şu komutları sırayla dener misiniz? Hangisi çalışırsa çıktısını atın:
Bash:
od -c /lib/libhardcode.so

od -x /lib/libhardcode.so

cat /lib/libhardcode.so | od -c

xxd /lib/libhardcode.so

hexdump /lib/libhardcode.so

cat /lib/libhardcode.so
Permission denied yemeyiz umarım, ya ufak 5 komut
 
Son düzenleyen: Moderatör:
Hocam, şu komutları sırayla dener misiniz? Hangisi çalışırsa çıktısını atın:
Bash:
od -c /lib/libhardcode.so

od -x /lib/libhardcode.so

cat /lib/libhardcode.so | od -c

xxd /lib/libhardcode.so

hexdump /lib/libhardcode.so

cat /lib/libhardcode.so
Permission denied yemeyiz umarım, ya ufak 5 komut
$ od -c /lib/libhardcode.so
/bin/sh: od: not found
$
$ od -x /lib/libhardcode.so
/bin/sh: od: not found
$
$ cat /lib/libhardcode.so | od -c
/bin/sh: od: not found
cat: write error: Broken pipe
$
$ xxd /lib/libhardcode.so
/bin/sh: xxd: not found
$
$ hexdump /lib/libhardcode.so
/bin/sh: hexdump: not found
$
$ cat /lib/libhardcode.so
EL�4�p4 (p�����


��dt�Q�������
␦�� $

pppp
'0pp%0␦)
(% !-,*
/
"#$$�
���������C �@�p��8�`�\PE���d���!
�d�����d���
���␦@�␦0n␦� 4���␦ (␦3␦[�} �'�t�p���h���Up$a`P-@�0� :v<�_GLOBAL_OFFSET_TABLE__gp_dispmemsetfopenfgetsfclosesnprintfCspHardCodeVerGetfseekftellmallocstrncpyfreadAES_set_decrypt_keyAES_decryptstrlenfwritefreeCspHardCodeDecryCspHardCodeParamGetgetpidsyscallstrstrstrsepstrcmpunlinkCspHardCodeDecryDefaultKeyAES_set_encrypt_keyAES_encryptCspHardCodeEncryCspHardCodeEncryDefaultKey__start_init_fini__uClibc_main__data_startlibc.so.0_ftext_fdata_gp_edata__bss_start_fbss_end/home/workspace/chip_en7513/opensource/uclibc_release/lib<'�����!'��௼������'� <'��p��!'�����l��h��d����\����!�=��!���'� !(!$� $@�����������d$�␦� � $�␦ȏ�@,@�!���� !$@ � @0!�����T@ � ! � !�� !!$
$@�!�BGF$c$c���!�@e���!�������@ !(!$�␦� � '�����l��h��d����\'�p<'��0��!'��௿������ !'P � �(!����!'� <'�����!'�����l��h��d����\��X��T��P��L��H�����'���!��!��!@ !(! � $!�� !�!�$��������d � $�␦̏� !@�!������d � $�␦Џ�����<@�(!���|$ � � !�����X � � !��$���� � ��8��$���� � @�!��@�!��4����0@�� !���(! � $��� !(!���$ � $��(!@ !���t$ � �!��� !(!���| � 0!'�<����DI��@b*@w�#���l� !$0! � �8!��P@�![$���!��!��!@ �!$ � 0�#����D��@���� � $����@ !���0@(! � p�!��P�!�����@(!$� ��*"���4 � � !����<� !���<$@0! � @�!��@�!� !���(! � &���0��!��##$����!��8�*@���!���T��< � �!�����T � � !�����, � � !�����,#� !��<@"$��$����4��0���T��< � ������T � � !����4`���, � !����0@@ !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$����4�կ�0<'�����!'��௿�������$�����'9 � � ��@
@�!�������@(! � $�␦ԏ�$����!��'� <'��P��!'��P��
���
���
���
���
���
���
���
���
���
�����!��!��!����!��$�����'�d !(! � $��'�d@ !���(! � $��'�$ !���(! � $@�����4 � !��@�$����� !'P � $@��$@ !�������������$B␦�$�␦��� � �������� � ��$~���� � @�!�� !$����������$�
� � ����� !@0!���8 � (!��@'�d�������@(!r$����@ !(! � $�� !������d � $�␦ȏ�@A@�!^ (! � ���0!@8!���� !$ � �� � $�x � �� ��� !���@@0�(! � ��@ !���L � (!��@%�(!������ �0! � � !�����4 � � !� !��$B��$
����f$B��e����$���A�����'�t'� $T␦����$W����@ !$ � 0!�� !(!���`@��$���T � !�����p � '�d��!�������$����p � !��$����
���
���
���
���
���
���
���
���
���
�'�
�<'�����!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���8 � 0!��t����p��l��h��d'�x<'�����!'�����l��h��d����\��X��T��P��L��H����!����!��������d � $��� !@�!������d � $�␦Џ���@�!@�$�����|(!$ � � !�����X � � !��$���� � ��<��$���� � @�!��@�!��8����4@�(!���'� ! � $!�� (! !���t$ � �!��� !(!���|0! � $'�<����DH��@b*@u�#���� !(! � $��� !(!��� � $��� !$���l 0! � �8!��Q��0K$����!�! �! � &�����D��@���� � $����@` !���P � @(!��0�#&R&s�����@(!��$􏙀<� !$ 0! � �8!��"#$����0��!��<�*@��5!���T� ! � �!�����T � � !�����, � � !�����,!� !@"$��$����8��4���T � � !������T � � !����8@���, � @ !����4 !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$���!��8�ԯ�4<'�����!'��௿�������������$�� � $����'9( � ��@@�!�������@(! � $�����!��'� <'��,��!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���H � 0!��t����p��l��h��d'�x�!<'��$��!�!���\��'�$����$'���������D���������h � ������x! � $/����x! � $.����x! � $-����x! � $,����x! � $+����x! � $*����x! � $)����x! � $(����x! � $&����x! � $%����x! � $$����x! � $#����x! � $"����x! � $!����x! � $ ����x! � $����x! � $����x! � $����x! � $���x! � $␦����x! � $����x! � $����x! � $����x! � $����x! � $<'��0��!'��௼������'� /etc/hardcoderrbwb+
Csp HardCode Decry (%d).
%s%s%s0x02720x0105%s%d%lu/var/tmp/hardcodefile-decry
Csp HardCode Decry fail (%d).
=
Fail to open the file %s .
rb+
Input parameter is NULL.

Csp HardCode encry (%d).
����� p�������������$`P@0 P�����p ������ �������p
�8�����x(������p������ ������x$����� ␦������ GCC: (Buildroot 2012.05) 4.3.6GCC: (GNU) 3.3.2Agnu.symtab.strtab.shstrtab.reginfo.dynamic.hash.dynsym.dynstr.init.text.MIPS.stubs.fini.rodata.data.got.pdr.comment.gnu.attributes.mdebug.abi32��$

-��\3
; $(P�O���[␦�␦�(a2␦�␦��io�td�y0�0�o����d$$�!�` &D�
� P␦� ␦�


d�P@! �'(�-��-��8
��A�H
O����Xlu }�����0�@�P�`� �@$�p��8���\�pP�
��'�/�6�<�J�Pd��\�ch�n␦u␦�␦ ����!
�␦� �␦0�␦@���␦P���d���
�d��␦`␦pcsp_hardcode_api.c_HCGetVerValdecryencryinitfini.c_DYNAMICprintf_fdata_gp_dispAES_set_decrypt_keysnprintfsyscall_gpgetpidfgetsAES_set_encrypt_keymallocCspHardCodeVerGet_initCspHardCodeParamGetCspHardCodeDecryDefaultKey__startfseek_ftextstrstrCspHardCodeEncryDefaultKeystrncpyunlinkfread__uClibc_mainfopen__bss_startmemsetmainftellfcloseAES_encryptstrcmpCspHardCodeEncrydata_start_finistrsepfwrite_edata_GLOBAL_OFFSET_TABLE__endCspHardCodeDecrystrlen__data_start_fbssAES_decryptfree$ f
 
$ od -c /lib/libhardcode.so
/bin/sh: od: not found
$
$ od -x /lib/libhardcode.so
/bin/sh: od: not found
$
$ cat /lib/libhardcode.so | od -c
/bin/sh: od: not found
cat: write error: Broken pipe
$
$ xxd /lib/libhardcode.so
/bin/sh: xxd: not found
$
$ hexdump /lib/libhardcode.so
/bin/sh: hexdump: not found
$
$ cat /lib/libhardcode.so
EL�4�p4 (p�����


��dt�Q�������
␦�� $

pppp
'0pp%0␦)
(% !-,*
/
"#$$�
���������C �@�p��8�`�\PE���d���!
�d�����d���
���␦@�␦0n␦� 4���␦ (␦3␦[�} �'�t�p���h���Up$a`P-@�0� :v<�_GLOBAL_OFFSET_TABLE__gp_dispmemsetfopenfgetsfclosesnprintfCspHardCodeVerGetfseekftellmallocstrncpyfreadAES_set_decrypt_keyAES_decryptstrlenfwritefreeCspHardCodeDecryCspHardCodeParamGetgetpidsyscallstrstrstrsepstrcmpunlinkCspHardCodeDecryDefaultKeyAES_set_encrypt_keyAES_encryptCspHardCodeEncryCspHardCodeEncryDefaultKey__start_init_fini__uClibc_main__data_startlibc.so.0_ftext_fdata_gp_edata__bss_start_fbss_end/home/workspace/chip_en7513/opensource/uclibc_release/lib<'�����!'��௼������'� <'��p��!'�����l��h��d����\����!�=��!���'� !(!$� $@�����������d$�␦� � $�␦ȏ�@,@�!���� !$@ � @0!�����T@ � ! � !�� !!$
$@�!�BGF$c$c���!�@e���!�������@ !(!$�␦� � '�����l��h��d����\'�p<'��0��!'��௿������ !'P � �(!����!'� <'�����!'�����l��h��d����\��X��T��P��L��H�����'���!��!��!@ !(! � $!�� !�!�$��������d � $�␦̏� !@�!������d � $�␦Џ�����<@�(!���|$ � � !�����X � � !��$���� � ��8��$���� � @�!��@�!��4����0@�� !���(! � $��� !(!���$ � $��(!@ !���t$ � �!��� !(!���| � 0!'�<����DI��@b*@w�#���l� !$0! � �8!��P@�![$���!��!��!@ �!$ � 0�#����D��@���� � $����@ !���0@(! � p�!��P�!�����@(!$� ��*"���4 � � !����<� !���<$@0! � @�!��@�!� !���(! � &���0��!��##$����!��8�*@���!���T��< � �!�����T � � !�����, � � !�����,#� !��<@"$��$����4��0���T��< � ������T � � !����4`���, � !����0@@ !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$����4�կ�0<'�����!'��௿�������$�����'9 � � ��@
@�!�������@(! � $�␦ԏ�$����!��'� <'��P��!'��P��
���
���
���
���
���
���
���
���
���
�����!��!��!����!��$�����'�d !(! � $��'�d@ !���(! � $��'�$ !���(! � $@�����4 � !��@�$����� !'P � $@��$@ !�������������$B␦�$�␦��� � �������� � ��$~���� � @�!�� !$����������$�
� � ����� !@0!���8 � (!��@'�d�������@(!r$����@ !(! � $�� !������d � $�␦ȏ�@A@�!^ (! � ���0!@8!���� !$ � �� � $�x � �� ��� !���@@0�(! � ��@ !���L � (!��@%�(!������ �0! � � !�����4 � � !� !��$B��$
����f$B��e����$���A�����'�t'� $T␦����$W����@ !$ � 0!�� !(!���`@��$���T � !�����p � '�d��!�������$����p � !��$����
���
���
���
���
���
���
���
���
���
�'�
�<'�����!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���8 � 0!��t����p��l��h��d'�x<'�����!'�����l��h��d����\��X��T��P��L��H����!����!��������d � $��� !@�!������d � $�␦Џ���@�!@�$�����|(!$ � � !�����X � � !��$���� � ��<��$���� � @�!��@�!��8����4@�(!���'� ! � $!�� (! !���t$ � �!��� !(!���|0! � $'�<����DH��@b*@u�#���� !(! � $��� !(!��� � $��� !$���l 0! � �8!��Q��0K$����!�! �! � &�����D��@���� � $����@` !���P � @(!��0�#&R&s�����@(!��$􏙀<� !$ 0! � �8!��"#$����0��!��<�*@��5!���T� ! � �!�����T � � !�����, � � !�����,!� !@"$��$����8��4���T � � !������T � � !����8@���, � @ !����4 !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$���!��8�ԯ�4<'�����!'��௿�������������$�� � $����'9( � ��@@�!�������@(! � $�����!��'� <'��,��!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���H � 0!��t����p��l��h��d'�x�!<'��$��!�!���\��'�$����$'���������D���������h � ������x! � $/����x! � $.����x! � $-����x! � $,����x! � $+����x! � $*����x! � $)����x! � $(����x! � $&����x! � $%����x! � $$����x! � $#����x! � $"����x! � $!����x! � $ ����x! � $����x! � $����x! � $����x! � $���x! � $␦����x! � $����x! � $����x! � $����x! � $����x! � $<'��0��!'��௼������'� /etc/hardcoderrbwb+
Csp HardCode Decry (%d).
%s%s%s0x02720x0105%s%d%lu/var/tmp/hardcodefile-decry
Csp HardCode Decry fail (%d).
=
Fail to open the file %s .
rb+
Input parameter is NULL.

Csp HardCode encry (%d).
����� p�������������$`P@0 P�����p ������ �������p
�8�����x(������p������ ������x$����� ␦������ GCC: (Buildroot 2012.05) 4.3.6GCC: (GNU) 3.3.2Agnu.symtab.strtab.shstrtab.reginfo.dynamic.hash.dynsym.dynstr.init.text.MIPS.stubs.fini.rodata.data.got.pdr.comment.gnu.attributes.mdebug.abi32��$

-��\3
; $(P�O���[␦�␦�(a2␦�␦��io�td�y0�0�o����d$$�!�` &D�
� P␦� ␦�


d�P@! �'(�-��-��8
��A�H
O����Xlu }�����0�@�P�`� �@$�p��8���\�pP�
��'�/�6�<�J�Pd��\�ch�n␦u␦�␦ ����!
�␦� �␦0�␦@���␦P���d���
�d��␦`␦pcsp_hardcode_api.c_HCGetVerValdecryencryinitfini.c_DYNAMICprintf_fdata_gp_dispAES_set_decrypt_keysnprintfsyscall_gpgetpidfgetsAES_set_encrypt_keymallocCspHardCodeVerGet_initCspHardCodeParamGetCspHardCodeDecryDefaultKey__startfseek_ftextstrstrCspHardCodeEncryDefaultKeystrncpyunlinkfread__uClibc_mainfopen__bss_startmemsetmainftellfcloseAES_encryptstrcmpCspHardCodeEncrydata_start_finistrsepfwrite_edata_GLOBAL_OFFSET_TABLE__endCspHardCodeDecrystrlen__data_start_fbssAES_decryptfree$ f
Hocam güncelleme vereyim, nereye kadar geldik:
✅ Key string bulundu: H168AV2.0_TTN (cat /etc/hardcode ile)
✅ libhardcode.so içinde %s%s%s ve 0x02720x0105 prefix'i gördük
✅ Config.bin yapısı tam anlaşıldı, offset bulundu
❌ Tek eksik: Key'in tam olarak nasıl türetildiği
cat /lib/libhardcode.so çıktısında her şey vardı, çok işe yaradı!
Bir / birkaç adım kaldı:
cat /var/tmp/hardcodefile-decry
Bu dosya varsa içinde decode edilmiş değerler düz metin olarak yazar — key türetme mantığını anlayabiliriz.
Şu an config.bin'i açmaya çalışırken 64 byte'ın 33'ü okunabilir çıkıyor — yani %51. Açılmış olsaydı %90+ olması gerekirdi.



EOF
printable=30/64: iv=5666de2083302cf9
printable=33/64: iv=ae9f32d07d8f03b4 > %51
printable=32/64: iv=524f065039bf67d6
printable=31/64: iv=0000000000000000
printable=32/64: iv=0e99b3c71d04c8d4