$ cspd hcget /etc/enhardcodefile CBCKey
/var/tmp/firmware5gcspd loading plugins@/lib/cspd/
Segmentation fault
$ cspd hcget /etc/enwebdhardcodefile CBCKey
cspd loading plugins@/lib/cspd/
Segmentation fault
$ cspd decry
cspd loading plugins@/lib/cspd/
Segmentation fault
$ sendcmd 1 DB p InternetGatewayDevice.X_ZTE-COM_DBC
table(InternetGatewayDevice.X_ZTE-COM_DBC) not find,the similar tables are as follows:
$ sendcmd 1 DB p InternetGatewayDevice.X_TTNET.Configuration.Shell
table(InternetGatewayDevice.X_TTNET.Configuration.Shell) not find,the similar tables are as follows:
$ ls /var/tmp/ | cat
AGENT.agent_asy
AGENT.agent_snd
AGENT_oam
CLI.CLI01_asy
CLI.CLI01_snd
CLI.CLI02_asy
CLI.CLI02_snd
CLI.CLI03_asy
CLI.CLI03_snd
CLI_oam
HTTPD.tr069_task_asy
HTTPD.tr069_task_snd
HTTPD.webd_task_asy
HTTPD.webd_task_snd
HTTPD_oam
IGD.SNTP.PARMS
MT7612E.dat
PROCESSSSHD.dropbear_asy
PROCESSSSHD.dropbear_snd
PROCESSSSHD_oam
PROCESSTELNETD.telnetd_asy
PROCESSTELNETD.telnetd_snd
PROCESSTELNETD_oam
RIP
RT2860AP.dat
chaninfo
cspd.adev_task_asy
cspd.adev_task_snd
cspd.comm_task_asy
cspd.comm_task_snd
cspd.cspconfig_asy
cspd.cspconfig_snd
cspd.cspd_asy
cspd.cspd_snd
cspd.dbd_task_asy
cspd.dbd_task_snd
cspd.detect_task_asy
cspd.detect_task_snd
cspd.dhcp4c_task_asy
cspd.dhcp4c_task_snd
cspd.dhcp6s_task_asy
cspd.dhcp6s_task_snd
cspd.dhcps_task_asy
cspd.dhcps_task_snd
cspd.dnsurl_asy
cspd.dnsurl_snd
cspd.easy_diag_asy
cspd.easy_diag_snd
cspd.log_task_asy
cspd.log_task_snd
cspd.srm_task_asy
cspd.srm_task_snd
cspd.syslog_task_asy
cspd.syslog_task_snd
cspd.wlan_manage_asy
cspd.wlan_manage_snd
cspd.wwan_asy
cspd.wwan_snd
cspd_oam
dbdns.conf
deceive.conf
default_resolv.conf
default_resolv_proxy.conf
dms.conf
dmsd0._snd
dns_policy.conf
dnscache
dnscomm.conf
edns0_custom.conf
firmware24g
firmware5g
ftp_password.log
hostnames
hosts
igmp_proxy.igmpproxy_asy
igmp_proxy.igmpproxy_snd
igmp_proxy_oam
linux-igd
logcat_ctrl
logf_mgt0X0000005E
mqtt.01_asy
mqtt.01_snd
mqtt.02_asy
mqtt.02_snd
mqtt.03_asy
mqtt.03_snd
mqtt_oam
multiapd.acd_asy
multiapd.acd_snd
multiapd.base_asy
multiapd.base_snd
multiapd.map_asy
multiapd.map_snd
multiapd.topo_asy
multiapd.topo_snd
multiapd_oam
pc
ppp
pppd1._snd
proxyserver.conf
quantwifiagent_data
ra_sendlog
resolv.conf
rpcAgent
special_resolv.conf
syslog_data
syslog_mgt0X0000005E
unix_logf_data
upnp.dmsmgrtask_asy
upnp.dmsmgrtask_snd
upnp.dmsmsgtask_asy
upnp.dmsmsgtask_snd
upnp.upnptask_asy
upnp.upnptask_snd
upnp_oam
vsftp_fifo
wancid_realname_map.conf
$ cat /var/tmp/db_encrycopy.bin
cat: can't open '/var/tmp/db_encrycopy.bin': No such file or directory
$ cat /var/tmp/chaninfo
cat: can't open '/var/tmp/chaninfo': Permission denied
$ cat /var/tmp/ftp_password.log
cat: can't open '/var/tmp/ftp_password.log': Permission denied
$ cat /var/tmp/firmware24g
cat: can't open '/var/tmp/firmware24g': Permission denied
$ cat /var/tmp/firmware5g
cat: can't open '/var/tmp/firmware5g': Permission denied
Busyboxta hangi komutlar var öğrenelim
şu iki komutu çalıştırır mısınız?
ls /lib/cspd/
busybox --list
busybox --list mevcut tüm komutları listeler, hangisinin çalıştığını görmüş oluruz
 
Busyboxta hangi komutlar var öğrenelim
şu iki komutu çalıştırır mısınız?
ls /lib/cspd/
busybox --list
busybox --list mevcut tüm komutları listeler, hangisinin çalıştığını görmüş oluruz
$ ls /lib/cspd/
ls: /lib/cspd/: No such file or directory
$ busybox --list
arping
ash
brctl
cat
chmod
chrt
cp
date
df
diagput
dmesg
dnsdomainname
echo
expr
free
fuser
getty
halt
head
hostname
ifconfig
init
insmod
kill
killall
killall5
linuxrc
ln
login
ls
lsmod
mkdir
mknod
mount
mv
nice
pgrep
pidof
ping
ping6
poweroff
ps
pwd
reboot
rm
rmdir
rmmod
route
setmac
sh
sleep
swapoff
swapon
taskset
tftp
timeout
top
tr
traceroute
umount
wget
$
 
$ ls /lib/cspd/
ls: /lib/cspd/: No such file or directory
$ busybox --list
arping
ash
brctl
cat
chmod
chrt
cp
date
df
diagput
dmesg
dnsdomainname
echo
expr
free
fuser
getty
halt
head
hostname
ifconfig
init
insmod
kill
killall
killall5
linuxrc
ln
login
ls
lsmod
mkdir
mknod
mount
mv
nice
pgrep
pidof
ping
ping6
poweroff
ps
pwd
reboot
rm
rmdir
rmmod
route
setmac
sh
sleep
swapoff
swapon
taskset
tftp
timeout
top
tr
traceroute
umount
wget
$
head -c 100 /var/tmp/ftp_password.log
head -c 100 /var/tmp/firmware24g
head -c 100 /var/tmp/chaninfo
wget -O - http://127.0.0.1/config.bin
```"
Belki dosya xml döner ve içinde şifre ile ilgili birşeyler vardır.
 
head -c 100 /var/tmp/ftp_password.log
head -c 100 /var/tmp/firmware24g
head -c 100 /var/tmp/chaninfo
wget -O - http://127.0.0.1/config.bin
```"
Belki dosya xml döner ve içinde şifre ile ilgili birşeyler vardır.
$ head -c 100 /var/tmp/ftp_password.log
0 /var/tmp/firmware24g
head -c 100 /var/tmp/chanhead: /var/tmp/ftp_password.log: Permission denied
$ head -c 100 /var/tmp/firmware24g
head: /var/tmp/firmware24g: Permission denied
$ head -c 100 /var/tmp/chaninfo
ttp://127.0.0.1/config.binhead: /var/tmp/chaninfo: Permission denied
$ wget -O - http://127.0.0.1/config.bin
$
 
$ head -c 100 /var/tmp/ftp_password.log
0 /var/tmp/firmware24g
head -c 100 /var/tmp/chanhead: /var/tmp/ftp_password.log: Permission denied
$ head -c 100 /var/tmp/firmware24g
head: /var/tmp/firmware24g: Permission denied
$ head -c 100 /var/tmp/chaninfo
ttp://127.0.0.1/config.binhead: /var/tmp/chaninfo: Permission denied
$ wget -O - http://127.0.0.1/config.bin
$
Şunları dener misiniz?
cat /etc/enhardcodefile
Cat/etc/hardcode
cat /etc/enwebdhardcodefile bakmadığımız bazı dosyalar da var
cat /lib/libhardcode.so
wget -O - 'http://127.0.0.1/zynoform.cgi?PageName=config_export'
wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
cat /tmp/cfg.bin
```"
 
Şunları dener misiniz?
cat /etc/enhardcodefile
Cat/etc/hardcode
cat /etc/enwebdhardcodefile bakmadığımız bazı dosyalar da var
cat /lib/libhardcode.so
wget -O - 'http://127.0.0.1/zynoform.cgi?PageName=config_export'
wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
cat /tmp/cfg.bin
```"
$ cat /etc/enhardcodefile
�i��K#rjc��
� �����H�7���/�� �+��͋D�H܌���U��2�p�f4h�Gs~�ہtW���n��}��^���z�*��Avr�ÅNz�o��I%��XՃ��4��"����^w�/Y$q␦C���#O7��>��I)�M9G�4I�J2~�r���{�K�i��ةNJVt!�z�~m2��W�9������-�G␦P��(��'
1�&�X��B���ۥ��Mu=:J�XIs׿�L�!A]E3�us�[␦oD���eե'?���D��6r<ۛ�
+R~؏��@f���I␦�xŧS�:�� p>!��␦
I�&��>���z�<���
�T�#yβ��(�&y��,9"�U�ad�Ƙ�LU�a�H�w�R*��9��b�B)&ov�~��P4X����S��e�����)i��hZ����Q9�~��CXyl4�u|b�W�7)H0OV��OtGm(�
�q��0
eeGLGBX�)�W������,~�4 '� �*.��v������D E���q�I']��U�'hj�J��$2�F��K�+�����mS����$�"���a膿��Ř?��d�u��J��i�qFڝΓ3��a�M�~m�~����1È�^��ͬ���$��m�����bc0u�B��ٍé��`>��h�.��us��sd����y��K�mw�O'��f?X�Ԃ�#��bE ~�7z_���m�9T�r����.�A�K&)[0;�|�g�Ko����ڕ;�>
�fs�)�>S%��l��36����N��X��r��␦�ڨ�z��$�MQ�Z|Tޞ���mhwPY������WPg^�)/b��K~�v���݅J���穦)�͡
MhfX_�.��o�̟ �A ��s6��o�j��|��q�;��^� ���.���!7�G�RN�J���f?��\p ����чrd�,la�<3�a�J��� [�2�B��␦b�K��m!�(��0�RD�P��C>e=�i)�W��xC�+=�k��ۯҼ��9�_�5���E��A�* N�0�*��(@�q�;Syi��%ڜ�~�����P���>�0'�}�'�=T7���Wn��Iz���*d|_���+0��w���!W��[ғ�C�� p������9<��)@������t� ����PS��lf*#W鑔��ф#/��܊�/!{l]8CI��8L��I�ho~��,̭ć��$����td��MX�j��rh{�C����Rٷ��9���[`s
�[P��<��Rn�džsKb�pLɋGǠ�cnS1�bBף��ԓ�AH
�������ꇧ|�DȨ�2�� u�lP����
Qn`�v�
D(�3�p��9���ťk���v␦��UpH���'�RZ� tf��x�E�8��c��aL���k�n7?jgo�:�s)�d�@�0�U6mM�~(_�V�v�=�%%V�5��dF3��9蟟���<T;g~�=��>M&D�'�
]Q�� �<���A��*�6�]�N�q�\�擙�hf�bdB���5���Q��H%�Y�8F������\nV���I�c��0�L�ӕEcr�"5u���bc�m�2 g�����[}�"��GO99��
����)
␦|�B: ��S��v%E�Kw)��'g!$H���%ƾt�5l}��=C�Ú+��=��m'����Q��KJ%*aW('o)�"q�F�����7v�4B�e"-�z��ҵ7����=9���fKDm��V��G���7\�7+��� ����lO����<m�B��o�␦�4��m�lh
���z�ѷ��۵T��pW�Gd�8������SyF�W��mڪ)��⁛���o.l��V)�(<v�Ď��)�,�c�����T:9�K4���|�zg�_��%2��gkv�����Q�G6��\��
d)���Ip'�����63�+s�G�89<M)�@ף]3�>s����ıI��znn=��o/��%���u��|m�E#���̜P�7�#2 ��m�m�b%��+��\L.�A���7�E[SG���`1��T���O�E_�"X �T\����
�������J���A7���Ė3D�n�e�d}�r&�y.��yCjUЕ�4�����@6F�ݺmv�YHuO4�\���x��1ο�{�ñ��_{j(�����"2=f���$����}���m%�*����F�qo6
ȑ�(��u�I�f���aILd�/���k��#-C ���I7J�H��3���g�hS4~���|�p��r�{��� ͅ�Ln�c։��Jx�6��\:�[�,�1*\�'Rl��Rl�a�7rH�H
�m5�KT8n��r�����q@������Z}(�����f�)@
�ѝ�䔨�?~��
��KZ�ͷ;t{������t)�v׀�syl�I~Jй��n�����%[m��hE�䂸�F��`T��B^b�|�Se�;��vt�g�+����[{3}Z��"M�R0��ڳit����+�w��HO␦�.]���&�#�
���t
�0�C�!Kϧ�����t����v�U��WwF�_�H�<i�Ym���~24��␦��+� X��\����@P��B��e��H
5�!S2����%�6W)3�CP1��(
7�Ʌn IY|��'�I޾Lˑ����?�:X�� �w���t��<ՔiE��r��r5F�����]I1U��e�&�6�e��ʠ������#c�Z1�I��l��¨ҳt~��Ee-cĈ��h�B%Z�Ԋ�Jyx�8��T乌��&𹞦L�=�G�
��JQ��\J��#]�Yy
pϤ�ɐV�
�w�$���%���"�pFD7"�׾��j&/��2�Ҏ��(�9!HqN��"1L�m��Ż�P�&��ey\�
Ѿ+��إI�,��C0�xq�����U!�]`^8Yhe)O&�y(��.;G��Qh��T�#]���V��kf�� �m���#7�����:x�
?��ι�U^+�?�M�!s�BA�ztR�������ͪ�'�a|8*R�6�{��W}�n���l�s�ڄ'��F7�/�]6K~��$�2+�����c�E�b�
��T5�� !T�ХK\�x#�Y�ٚ�K`��=T
D���7v�ڿ���;:�?
P�"*���֫}����SW�?bWb�JK.��<��?mև��NQ�
�U�C���B��Hz���\���������c�8�w�].;�޺٘<,�͂u߂�����{%�?�SҤ��
�d�.��4��_˶A�S��G^�ٙd��'x�
�9�^}=�1����޴�3:e�����+�_LZ�;���,��^�66��Է=�r���␦��h�5�G ��E%�Z���S�3,�Utٮ�R[��q�}M�l�jV␦Bӛj���E�
OU!�S����Vr��aOR׍�rW��@�'�5�j)�r�܌�D�?.���2
��*a`�sn�t�̈2Xerރ�%
l8�ྨ0GA!xcF�}�e���/-]1��������n�m����8PD�*�;6�!�kFI1a'�;:�6R�
'�mQB6�ĐN�������m+�
*^��D�A\�ǯF ߑ�B��9=������6��N�x%~�d1ְ�,$ Cat/etc/hardcode ,|�RD����O�i��73�+����E{��r,�����,
/bin/sh: Cat/etc/hardcode: not found
$ cat /etc/enwebdhardcodefile
�����62@�O�N�.�.ΒƵ^ިZ�C�?8��IjlΓ~TH��_p�.���ډ��L�F`w${N���L7��}+0:��Kw�y[��2�
mo�0���VG����$F+g�p�3␦h��#�2��A� X{z.K���Uܕ��6�բǖ�(��r�� 6���D@��V$7�e�?������!+`Z�vѬ�-�}��5��1���Oi�PvU{�����J����"U9�|�C��)��xlA�&�m~t%�hJ�N
����:���-�bG�ʅ��o�.,���(�מ!)�N��
q_⭽�=���&× 2*�Q�g�zK�
����m��5>��K�=��C��'�DJ�=�%� �����`�NB����0Tsp"Odj���/ò@��I�%O[Ò��$K�i'y߾@��ܙ�
�oap<a$�w�Yv��^����d��R�1�����\��6#�k�r���**N�c��e�+?����~6o�^��t�"�e��z"[���a

@j
g����o��}�{ϖ��{jG�;
�e����x\^�zS����ׄ�0r�j� --�����:��ļo������t2�o�!�y�pvon�9�eR#���h��"�LO�)�Z�����W������SC.+p��^Ju�B<�;���j�9�Ar�MXo��|[>�ɴ��\��{PF��.��0",I�s
�$�␦&��sK�l{�cMy�9����^E��sm����y�ӟ�37���CR\W������s���ZQ�\����l�Ԭ�BK�|f�ϖ\��Z(*���S���'
���Z���q�<��d�;�7���C�
FwL%"Cq�˿ zB�+␦�fp,�*J`��q�
Z� ���tT
�\c�c(Gy��vA����2␦���]�`�ͿN�n��{iug|*�
��{H���H���|u>$inw���G
P��|4Pw�^� <N�?���'�w�W.6�v7��D��X
r�W�p�G�2��l�Q�@��_j*��e�
�Ċ]V�=I-e��l�
\�t�;���\;�F��\Pb�/�%�θ���=�$Rv�C�ʽn�]GXppY0,Ѯ␦���K��M?�tݲV%Kf<�R��7fp�}$;���c�Q5>��N E�4$u�f-
��1�y�ܰ7 ��� s�%�l�%a�����F���Cr��P�1y:{��Y�xN��?�?�"��:hp+{�@Q�X[r~m��wh�|���y����ʲ��5z^��~� 72Gqv�rD~WS���+x+���P��D�I�@�����_��a�
��bu�x
�{��lmbTStpʴ��{3�.%B1&���X�Ët|�d� ��w�I���A��kH<����y� '2m�@�9Ŧ$i:u+���,I�|
3"!���␦��]Q��%�S�%�����,�_�7g��J��j�b�u$ cat /lib/libhardcode.so
0.1/zynoform.cgi?PageName=config_export'
wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
cat /tmp/cfg.binEL�4�p4 (p�����


��dt�Q�������
␦�� $

pppp
'0pp%0␦)
(% !-,*
/
"#$$�
���������C �@�p��8�`�\PE���d���!
�d�����d���
���␦@�␦0n␦� 4���␦ (␦3␦[�} �'�t�p���h���Up$a`P-@�0� :v<�_GLOBAL_OFFSET_TABLE__gp_dispmemsetfopenfgetsfclosesnprintfCspHardCodeVerGetfseekftellmallocstrncpyfreadAES_set_decrypt_keyAES_decryptstrlenfwritefreeCspHardCodeDecryCspHardCodeParamGetgetpidsyscallstrstrstrsepstrcmpunlinkCspHardCodeDecryDefaultKeyAES_set_encrypt_keyAES_encryptCspHardCodeEncryCspHardCodeEncryDefaultKey__start_init_fini__uClibc_main__data_startlibc.so.0_ftext_fdata_gp_edata__bss_start_fbss_end/home/workspace/chip_en7513/opensource/uclibc_release/lib<'�����!'��௼������'� <'��p��!'�����l��h��d����\����!�=��!���'� !(!$� $@�����������d$�␦� � $�␦ȏ�@,@�!���� !$@ � @0!�����T@ � ! � !�� !!$
$@�!�BGF$c$c���!�@e���!�������@ !(!$�␦� � '�����l��h��d����\'�p<'��0��!'��௿������ !'P � �(!����!'� <'�����!'�����l��h��d����\��X��T��P��L��H�����'���!��!��!@ !(! � $!�� !�!�$��������d � $�␦̏� !@�!������d � $�␦Џ�����<@�(!���|$ � � !�����X � � !��$���� � ��8��$���� � @�!��@�!��4����0@�� !���(! � $��� !(!���$ � $��(!@ !���t$ � �!��� !(!���| � 0!'�<����DI��@b*@w�#���l� !$0! � �8!��P@�![$���!��!��!@ �!$ � 0�#����D��@���� � $����@ !���0@(! � p�!��P�!�����@(!$� ��*"���4 � � !����<� !���<$@0! � @�!��@�!� !���(! � &���0��!��##$����!��8�*@���!���T��< � �!�����T � � !�����, � � !�����,#� !��<@"$��$����4��0���T��< � ������T � � !����4`���, � !����0@@ !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$����4�կ�0<'�����!'��௿�������$�����'9 � � ��@
@�!�������@(! � $�␦ԏ�$����!��'� <'��P��!'��P��
���
���
���
���
���
���
���
���
���
�����!��!��!����!��$�����'�d !(! � $��'�d@ !���(! � $��'�$ !���(! � $@�����4 � !��@�$����� !'P � $@��$@ !�������������$B␦�$�␦��� � �������� � ��$~���� � @�!�� !$����������$�
� � ����� !@0!���8 � (!��@'�d�������@(!r$����@ !(! � $�� !������d � $�␦ȏ�@A@�!^ (! � ���0!@8!���� !$ � �� � $�x � �� ��� !���@@0�(! � ��@ !���L � (!��@%�(!������ �0! � � !�����4 � � !� !��$B��$
����f$B��e����$���A�����'�t'� $T␦����$W����@ !$ � 0!�� !(!���`@��$���T � !�����p � '�d��!�������$����p � !��$����
���
���
���
���
���
���
���
���
���
�'�
�<'�����!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���8 � 0!��t����p��l��h��d'�x<'�����!'�����l��h��d����\��X��T��P��L��H����!����!��������d � $��� !@�!������d � $�␦Џ���@�!@�$�����|(!$ � � !�����X � � !��$���� � ��<��$���� � @�!��@�!��8����4@�(!���'� ! � $!�� (! !���t$ � �!��� !(!���|0! � $'�<����DH��@b*@u�#���� !(! � $��� !(!��� � $��� !$���l 0! � �8!��Q��0K$����!�! �! � &�����D��@���� � $����@` !���P � @(!��0�#&R&s�����@(!��$􏙀<� !$ 0! � �8!��"#$����0��!��<�*@��5!���T� ! � �!�����T � � !�����, � � !�����,!� !@"$��$����8��4���T � � !������T � � !����8@���, � @ !����4 !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$���!��8�ԯ�4<'�����!'��௿�������������$�� � $����'9( � ��@@�!�������@(! � $�����!��'� <'��,��!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���H � 0!��t����p��l��h��d'�x�!<'��$��!�!���\��'�$����$'���������D���������h � ������x! � $/����x! � $.����x! � $-����x! � $,����x! � $+����x! � $*����x! � $)����x! � $(����x! � $&����x! � $%����x! � $$����x! � $#����x! � $"����x! � $!����x! � $ ����x! � $����x! � $����x! � $����x! � $���x! � $␦����x! � $����x! � $����x! � $����x! � $����x! � $<'��0��!'��௼������'� /etc/hardcoderrbwb+
Csp HardCode Decry (%d).
%s%s%s0x02720x0105%s%d%lu/var/tmp/hardcodefile-decry
Csp HardCode Decry fail (%d).
=
Fail to open the file %s .
rb+
Input parameter is NULL.

Csp HardCode encry (%d).
����� p�������������$`P@0 P�����p ������ �������p
�8�����x(������p������ ������x$����� ␦������ GCC: (Buildroot 2012.05) 4.3.6GCC: (GNU) 3.3.2Agnu.symtab.strtab.shstrtab.reginfo.dynamic.hash.dynsym.dynstr.init.text.MIPS.stubs.fini.rodata.data.got.pdr.comment.gnu.attributes.mdebug.abi32��$

-��\3
; $(P�O���[␦�␦�(a2␦�␦��io�td�y0�0�o����d$$�!�` &D�
� P␦� ␦�


d�P@! �'(�-��-��8
��A�H
O����Xlu }�����0�@�P�`� �@$�p��8���\�pP�
��'�/�6�<�J�Pd��\�ch�n␦u␦�␦ ����!
�␦� �␦0�␦@���␦P���d���
�d��␦`␦pcsp_hardcode_api.c_HCGetVerValdecryencryinitfini.c_DYNAMICprintf_fdata_gp_dispAES_set_decrypt_keysnprintfsyscall_gpgetpidfgetsAES_set_encrypt_keymallocCspHardCodeVerGet_initCspHardCodeParamGetCspHardCodeDecryDefaultKey__startfseek_ftextstrstrCspHardCodeEncryDefaultKeystrncpyunlinkfread__uClibc_mainfopen__bss_startmemsetmainftellfcloseAES_encryptstrcmpCspHardCodeEncrydata_start_finistrsepfwrite_edata_GLOBAL_OFFSET_TABLE__endCspHardCodeDecrystrlen__data_start_fbssAES_decryptfree$ wget -O - 'http://127.0.0.1/zynoform.cgi?PageName=config_export'
$ wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
$ cat /tmp/cfg.bin
cat: can't open '/tmp/cfg.bin': No such file or directory
$
 
$ cat /etc/enhardcodefile
�i��K#rjc��
� �����H�7���/�� �+��͋D�H܌���U��2�p�f4h�Gs~�ہtW���n��}��^���z�*��Avr�ÅNz�o��I%��XՃ��4��"����^w�/Y$q␦C���#O7��>��I)�M9G�4I�J2~�r���{�K�i��ةNJVt!�z�~m2��W�9������-�G␦P��(��'
1�&�X��B���ۥ��Mu=:J�XIs׿�L�!A]E3�us�[␦oD���eե'?���D��6r<ۛ�
+R~؏��@f���I␦�xŧS�:�� p>!��␦
I�&��>���z�<���
�T�#yβ��(�&y��,9"�U�ad�Ƙ�LU�a�H�w�R*��9��b�B)&ov�~��P4X����S��e�����)i��hZ����Q9�~��CXyl4�u|b�W�7)H0OV��OtGm(�
�q��0
eeGLGBX�)�W������,~�4 '� �*.��v������D E���q�I']��U�'hj�J��$2�F��K�+�����mS����$�"���a膿��Ř?��d�u��J��i�qFڝΓ3��a�M�~m�~����1È�^��ͬ���$��m�����bc0u�B��ٍé��`>��h�.��us��sd����y��K�mw�O'��f?X�Ԃ�#��bE ~�7z_���m�9T�r����.�A�K&)[0;�|�g�Ko����ڕ;�>
�fs�)�>S%��l��36����N��X��r��␦�ڨ�z��$�MQ�Z|Tޞ���mhwPY������WPg^�)/b��K~�v���݅J���穦)�͡
MhfX_�.��o�̟ �A ��s6��o�j��|��q�;��^� ���.���!7�G�RN�J���f?��\p ����чrd�,la�<3�a�J��� [�2�B��␦b�K��m!�(��0�RD�P��C>e=�i)�W��xC�+=�k��ۯҼ��9�_�5���E��A�* N�0�*��(@�q�;Syi��%ڜ�~�����P���>�0'�}�'�=T7���Wn��Iz���*d|_���+0��w���!W��[ғ�C�� p������9<��)@������t� ����PS��lf*#W鑔��ф#/��܊�/!{l]8CI��8L��I�ho~��,̭ć��$����td��MX�j��rh{�C����Rٷ��9���[`s
�[P��<��Rn�džsKb�pLɋGǠ�cnS1�bBף��ԓ�AH
�������ꇧ|�DȨ�2�� u�lP����
Qn`�v�
D(�3�p��9���ťk���v␦��UpH���'�RZ� tf��x�E�8��c��aL���k�n7?jgo�:�s)�d�@�0�U6mM�~(_�V�v�=�%%V�5��dF3��9蟟���<T;g~�=��>M&D�'�
]Q�� �<���A��*�6�]�N�q�\�擙�hf�bdB���5���Q��H%�Y�8F������\nV���I�c��0�L�ӕEcr�"5u���bc�m�2 g�����[}�"��GO99��
����)
␦|�B: ��S��v%E�Kw)��'g!$H���%ƾt�5l}��=C�Ú+��=��m'����Q��KJ%*aW('o)�"q�F�����7v�4B�e"-�z��ҵ7����=9���fKDm��V��G���7\�7+��� ����lO����<m�B��o�␦�4��m�lh
���z�ѷ��۵T��pW�Gd�8������SyF�W��mڪ)��⁛���o.l��V)�(<v�Ď��)�,�c�����T:9�K4���|�zg�_��%2��gkv�����Q�G6��\��
d)���Ip'�����63�+s�G�89<M)�@ף]3�>s����ıI��znn=��o/��%���u��|m�E#���̜P�7�#2 ��m�m�b%��+��\L.�A���7�E[SG���`1��T���O�E_�"X �T\����
�������J���A7���Ė3D�n�e�d}�r&�y.��yCjUЕ�4�����@6F�ݺmv�YHuO4�\���x��1ο�{�ñ��_{j(�����"2=f���$����}���m%�*����F�qo6
ȑ�(��u�I�f���aILd�/���k��#-C ���I7J�H��3���g�hS4~���|�p��r�{��� ͅ�Ln�c։��Jx�6��\:�[�,�1*\�'Rl��Rl�a�7rH�H
�m5�KT8n��r�����q@������Z}(�����f�)@
�ѝ�䔨�?~��
��KZ�ͷ;t{������t)�v׀�syl�I~Jй��n�����%[m��hE�䂸�F��`T��B^b�|�Se�;��vt�g�+����[{3}Z��"M�R0��ڳit����+�w��HO␦�.]���&�#�
���t
�0�C�!Kϧ�����t����v�U��WwF�_�H�<i�Ym���~24��␦��+� X��\����@P��B��e��H
5�!S2����%�6W)3�CP1��(
7�Ʌn IY|��'�I޾Lˑ����?�:X�� �w���t��<ՔiE��r��r5F�����]I1U��e�&�6�e��ʠ������#c�Z1�I��l��¨ҳt~��Ee-cĈ��h�B%Z�Ԋ�Jyx�8��T乌��&𹞦L�=�G�
��JQ��\J��#]�Yy
pϤ�ɐV�
�w�$���%���"�pFD7"�׾��j&/��2�Ҏ��(�9!HqN��"1L�m��Ż�P�&��ey\�
Ѿ+��إI�,��C0�xq�����U!�]`^8Yhe)O&�y(��.;G��Qh��T�#]���V��kf�� �m���#7�����:x�
?��ι�U^+�?�M�!s�BA�ztR�������ͪ�'�a|8*R�6�{��W}�n���l�s�ڄ'��F7�/�]6K~��$�2+�����c�E�b�
��T5�� !T�ХK\�x#�Y�ٚ�K`��=T
D���7v�ڿ���;:�?
P�"*���֫}����SW�?bWb�JK.��<��?mև��NQ�
�U�C���B��Hz���\���������c�8�w�].;�޺٘<,�͂u߂�����{%�?�SҤ��

�9�^}=�1����޴�3:e�����+�_LZ�;���,��^�66��Է=�r���␦��h�5�G ��E%�Z���S�3,�Utٮ�R[��q�}M�l�jV␦Bӛj���E�
OU!�S����Vr��aOR׍�rW��@�'�5�j)�r�܌�D�?.���2
��*a`�sn�t�̈2Xerރ�%
l8�ྨ0GA!xcF�}�e���/-]1��������n�m����8PD�*�;6�!�kFI1a'�;:�6R�
'�mQB6�ĐN�������m+�
*^��D�A\�ǯF ߑ�B��9=������6��N�x%~�d1ְ�,$ Cat/etc/hardcode ,|�RD����O�i��73�+����E{��r,�����,
/bin/sh: Cat/etc/hardcode: not found
$ cat /etc/enwebdhardcodefile
�����62@�O�N�.�.ΒƵ^ިZ�C�?8��IjlΓ~TH��_p�.���ډ��L�F`w${N���L7��}+0:��Kw�y[��2�
mo�0���VG����$F+g�p�3␦h��#�2��A� X{z.K���Uܕ��6�բǖ�(��r�� 6���D@��V$7�e�?������!+`Z�vѬ�-�}��5��1���Oi�PvU{�����J����"U9�|�C��)��xlA�&�m~t%�hJ�N
����:���-�bG�ʅ��o�.,���(�מ!)�N��
q_⭽�=���&× 2*�Q�g�zK�
����m��5>��K�=��C��'�DJ�=�%� �����`�NB����0Tsp"Odj���/ò@��I�%O[Ò��$K�i'y߾@��ܙ�
�oap<a$�w�Yv��^����d��R�1�����\��6#�k�r���**N�c��e�+?����~6o�^��t�"�e��z"[���a

@j
g����o��}�{ϖ��{jG�;
�e����x\^�zS����ׄ�0r�j� --�����:��ļo������t2�o�!�y�pvon�9�eR#���h��"�LO�)�Z�����W������SC.+p��^Ju�B<�;���j�9�Ar�MXo��|[>�ɴ��\��{PF��.��0",I�s
�$�␦&��sK�l{�cMy�9����^E��sm����y�ӟ�37���CR\W������s���ZQ�\����l�Ԭ�BK�|f�ϖ\��Z(*���S���'
���Z���q�<��d�;�7���C�
FwL%"Cq�˿ zB�+␦�fp,�*J`��q�
Z� ���tT
�\c�c(Gy��vA����2␦���]�`�ͿN�n��{iug|*�
��{H���H���|u>$inw���G
P��|4Pw�^� <N�?���'�w�W.6�v7��D��X
r�W�p�G�2��l�Q�@��_j*��e�
�Ċ]V�=I-e��l�
\�t�;���\;�F��\Pb�/�%�θ���=�$Rv�C�ʽn�]GXppY0,Ѯ␦���K��M?�tݲV%Kf<�R��7fp�}$;���c�Q5>��N E�4$u�f-
��1�y�ܰ7 ��� s�%�l�%a�����F���Cr��P�1y:{��Y�xN��?�?�"��:hp+{�@Q�X[r~m��wh�|���y����ʲ��5z^��~� 72Gqv�rD~WS���+x+���P��D�I�@�����_��a�
��bu�x
�{��lmbTStpʴ��{3�.%B1&���X�Ët|�d� ��w�I���A��kH<����y� '2m�@�9Ŧ$i:u+���,I�|
3"!���␦��]Q��%�S�%�����,�_�7g��J��j�b�u$ cat /lib/libhardcode.so
0.1/zynoform.cgi?PageName=config_export'
wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
cat /tmp/cfg.binEL�4�p4 (p�����


��dt�Q�������
␦�� $

pppp
'0pp%0␦)
(% !-,*
/
"#$$�
���������C �@�p��8�`�\PE���d���!
�d�����d���
���␦@�␦0n␦� 4���␦ (␦3␦[�} �'�t�p���h���Up$a`P-@�0� :v<�_GLOBAL_OFFSET_TABLE__gp_dispmemsetfopenfgetsfclosesnprintfCspHardCodeVerGetfseekftellmallocstrncpyfreadAES_set_decrypt_keyAES_decryptstrlenfwritefreeCspHardCodeDecryCspHardCodeParamGetgetpidsyscallstrstrstrsepstrcmpunlinkCspHardCodeDecryDefaultKeyAES_set_encrypt_keyAES_encryptCspHardCodeEncryCspHardCodeEncryDefaultKey__start_init_fini__uClibc_main__data_startlibc.so.0_ftext_fdata_gp_edata__bss_start_fbss_end/home/workspace/chip_en7513/opensource/uclibc_release/lib<'�����!'��௼������'� <'��p��!'�����l��h��d����\����!�=��!���'� !(!$� $@�����������d$�␦� � $�␦ȏ�@,@�!���� !$@ � @0!�����T@ � ! � !�� !!$
$@�!�BGF$c$c���!�@e���!�������@ !(!$�␦� � '�����l��h��d����\'�p<'��0��!'��௿������ !'P � �(!����!'� <'�����!'�����l��h��d����\��X��T��P��L��H�����'���!��!��!@ !(! � $!�� !�!�$��������d � $�␦̏� !@�!������d � $�␦Џ�����<@�(!���|$ � � !�����X � � !��$���� � ��8��$���� � @�!��@�!��4����0@�� !���(! � $��� !(!���$ � $��(!@ !���t$ � �!��� !(!���| � 0!'�<����DI��@b*@w�#���l� !$0! � �8!��P@�![$���!��!��!@ �!$ � 0�#����D��@���� � $����@ !���0@(! � p�!��P�!�����@(!$� ��*"���4 � � !����<� !���<$@0! � @�!��@�!� !���(! � &���0��!��##$����!��8�*@���!���T��< � �!�����T � � !�����, � � !�����,#� !��<@"$��$����4��0���T��< � ������T � � !����4`���, � !����0@@ !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$����4�կ�0<'�����!'��௿�������$�����'9 � � ��@
@�!�������@(! � $�␦ԏ�$����!��'� <'��P��!'��P��
���
���
���
���
���
���
���
���
���
�����!��!��!����!��$�����'�d !(! � $��'�d@ !���(! � $��'�$ !���(! � $@�����4 � !��@�$����� !'P � $@��$@ !�������������$B␦�$�␦��� � �������� � ��$~���� � @�!�� !$����������$�
� � ����� !@0!���8 � (!��@'�d�������@(!r$����@ !(! � $�� !������d � $�␦ȏ�@A@�!^ (! � ���0!@8!���� !$ � �� � $�x � �� ��� !���@@0�(! � ��@ !���L � (!��@%�(!������ �0! � � !�����4 � � !� !��$B��$
����f$B��e����$���A�����'�t'� $T␦����$W����@ !$ � 0!�� !(!���`@��$���T � !�����p � '�d��!�������$����p � !��$����
���
���
���
���
���
���
���
���
���
�'�
�<'�����!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���8 � 0!��t����p��l��h��d'�x<'�����!'�����l��h��d����\��X��T��P��L��H����!����!��������d � $��� !@�!������d � $�␦Џ���@�!@�$�����|(!$ � � !�����X � � !��$���� � ��<��$���� � @�!��@�!��8����4@�(!���'� ! � $!�� (! !���t$ � �!��� !(!���|0! � $'�<����DH��@b*@u�#���� !(! � $��� !(!��� � $��� !$���l 0! � �8!��Q��0K$����!�! �! � &�����D��@���� � $����@` !���P � @(!��0�#&R&s�����@(!��$􏙀<� !$ 0! � �8!��"#$����0��!��<�*@��5!���T� ! � �!�����T � � !�����, � � !�����,!� !@"$��$����8��4���T � � !������T � � !����8@���, � @ !����4 !���, � ����l!��h��d����\��X��T��P��L��H'�p��$��$���!��8�ԯ�4<'�����!'��௿�������������$�� � $����'9( � ��@@�!�������@(! � $�����!��'� <'��,��!'�����t��p��l��h��d�����'���!��! !(! � $��'� $@��� ! � (!�� !���'P � $@���� !�������������$B�$�␦�$�␦� � $��@ !(!���H � 0!��t����p��l��h��d'�x�!<'��$��!�!���\��'�$����$'���������D���������h � ������x! � $/����x! � $.����x! � $-����x! � $,����x! � $+����x! � $*����x! � $)����x! � $(����x! � $&����x! � $%����x! � $$����x! � $#����x! � $"����x! � $!����x! � $ ����x! � $����x! � $����x! � $����x! � $���x! � $␦����x! � $����x! � $����x! � $����x! � $����x! � $<'��0��!'��௼������'� /etc/hardcoderrbwb+
Csp HardCode Decry (%d).
%s%s%s0x02720x0105%s%d%lu/var/tmp/hardcodefile-decry
Csp HardCode Decry fail (%d).
=
Fail to open the file %s .
rb+
Input parameter is NULL.

Csp HardCode encry (%d).
����� p�������������$`P@0 P�����p ������ �������p
�8�����x(������p������ ������x$����� ␦������ GCC: (Buildroot 2012.05) 4.3.6GCC: (GNU) 3.3.2Agnu.symtab.strtab.shstrtab.reginfo.dynamic.hash.dynsym.dynstr.init.text.MIPS.stubs.fini.rodata.data.got.pdr.comment.gnu.attributes.mdebug.abi32��$

-��\3
; $(P�O���[␦�␦�(a2␦�␦��io�td�y0�0�o����d$$�!�` &D�
� P␦� ␦�


d�P@! �'(�-��-��8
��A�H
O����Xlu }�����0�@�P�`� �@$�p��8���\�pP�
��'�/�6�<�J�Pd��\�ch�n␦u␦�␦ ����!
�␦� �␦0�␦@���␦P���d���
�d��␦`␦pcsp_hardcode_api.c_HCGetVerValdecryencryinitfini.c_DYNAMICprintf_fdata_gp_dispAES_set_decrypt_keysnprintfsyscall_gpgetpidfgetsAES_set_encrypt_keymallocCspHardCodeVerGet_initCspHardCodeParamGetCspHardCodeDecryDefaultKey__startfseek_ftextstrstrCspHardCodeEncryDefaultKeystrncpyunlinkfread__uClibc_mainfopen__bss_startmemsetmainftellfcloseAES_encryptstrcmpCspHardCodeEncrydata_start_finistrsepfwrite_edata_GLOBAL_OFFSET_TABLE__endCspHardCodeDecrystrlen__data_start_fbssAES_decryptfree$ wget -O - 'http://127.0.0.1/zynoform.cgi?PageName=config_export'
$ wget -O /tmp/cfg.bin 'http://127.0.0.1/userconfig/cfg.bin'
$ cat /tmp/cfg.bin
cat: can't open '/tmp/cfg.bin': No such file or directory
$
[0x005ecd94]> s 0x00624760
[0x00624760]> pdf
; NULL XREF from section..dynsym @ +0x35c4(r)
; CALL XREFS from fcn.005d93f4 @ 0x5d96b8(r), 0x5d96c0(r)
┌ 252: sym.CspDBInitPdtInterface (int32_t arg1);
│ `- args(a0) vars(3:sp[0x4..0x10])
│ 0x00624760 3c1c000f lui gp, 0xf
│ 0x00624764 279c3720 addiu gp, gp, 0x3720
│ 0x00624768 0399e021 addu gp, gp, t9
│ 0x0062476c 27bdffe0 addiu sp, sp, -0x20
│ 0x00624770 afbf001c sw ra, (var_1ch)
│ 0x00624774 afb00018 sw s0, (var_18h)
│ 0x00624778 afbc0010 sw gp, (var_10h)
│ 0x0062477c 8f8690e0 lw a2, -str.Ver(gp) ; [0x6c0000:4]=0x56657200 ; "Ver"
│ 0x00624780 8f999134 lw t9, -sym.dbAddCfgItem(gp) ; [0x5e9fb8:4]=0x3c1c0071 ; "<\x1c"
│ 0x00624784 00808021 move s0, a0 ; arg1
│ 0x00624788 24c65e60 addiu a2, a2, 0x5e60 ; 0x6c5e60 ; "/proc/cfg/db_user_cfg.xml" ; str._proc_cfg_db_user_cfg.xml
│ 0x0062478c 3404ffff ori a0, zero, 0xffff
│ 0x00624790 0320f809 jalr t9
│ 0x00624794 00002821 move a1, zero
│ 0x00624798 8fbc0010 lw gp, (var_10h)
│ 0x0062479c 3404ffff ori a0, zero, 0xffff
│ 0x006247a0 24050001 addiu a1, zero, 1
│ 0x006247a4 8f8690e0 lw a2, -str.Ver(gp) ; [0x6c0000:4]=0x56657200 ; "Ver"
│ 0x006247a8 8f999134 lw t9, -sym.dbAddCfgItem(gp) ; [0x5e9fb8:4]=0x3c1c0071 ; "<\x1c"
│ 0x006247ac 00000000 nop
│ 0x006247b0 0320f809 jalr t9
│ 0x006247b4 24c65e7c addiu a2, a2, 0x5e7c ; 0x6c5e7c ; "/proc/cfg/db_default_auto_cfg.xml" ; str._proc_cfg_db_default_auto_cfg.xml
│ 0x006247b8 8fbc0010 lw gp, (var_10h)
│ 0x006247bc 3404ffff ori a0, zero, 0xffff
│ 0x006247c0 24050002 addiu a1, zero, 2
│ 0x006247c4 8f8690e0 lw a2, -str.Ver(gp) ; [0x6c0000:4]=0x56657200 ; "Ver"
│ 0x006247c8 8f999134 lw t9, -sym.dbAddCfgItem(gp) ; [0x5e9fb8:4]=0x3c1c0071 ; "<\x1c"
│ 0x006247cc 00000000 nop
│ 0x006247d0 0320f809 jalr t9
│ 0x006247d4 24c65ea0 addiu a2, a2, 0x5ea0 ; 0x6c5ea0 ; "/proc/cfg/db_backup_cfg.xml" ; str._proc_cfg_db_backup_cfg.xml
│ 0x006247d8 8fbc0010 lw gp, (var_10h)
│ 0x006247dc 24020708 addiu v0, zero, 0x708
│ 0x006247e0 ae020000 sw v0, (s0)
│ 0x006247e4 24020001 addiu v0, zero, 1
│ 0x006247e8 ae020004 sw v0, 4(s0)
│ 0x006247ec 8f829138 lw v0, -sym.CspDBSetBackupItem(gp) ; [0x624b1c:4]=0x3c1c000f ; "<\x1c"
│ 0x006247f0 8f8590e0 lw a1, -str.Ver(gp) ; [0x6c0000:4]=0x56657200 ; "Ver"
│ 0x006247f4 8f999944 lw t9, -sym.imp.strncpy(gp) ; [0x65b870:4]=0x8f998010
│ 0x006247f8 ae020008 sw v0, 8(s0)
│ 0x006247fc 8f82913c lw v0, -sym.CspDBSetPartRstItem(gp) ; [0x6249d0:4]=0x3c1c000f ; "<\x1c"
│ 0x00624800 2604020f addiu a0, s0, 0x20f
│ 0x00624804 24a55ebc addiu a1, a1, 0x5ebc ; 0x6c5ebc ; "MTKen7513key" ; str.MTKen7513key
│ 0x00624808 ae02000c sw v0, 0xc(s0)
│ 0x0062480c 8f829140 lw v0, -sym.CspDBLoadProductPersonCfg(gp) ; [0x6231d0:4]=0x3e00008
│ 0x00624810 24060040 addiu a2, zero, 0x40
│ 0x00624814 ae020010 sw v0, 0x10(s0)
│ 0x00624818 8f829144 lw v0, -sym.PdtDBCfgFileEncry(gp) ; [0x624938:4]=0x3c1c000f ; "<\x1c"
│ 0x0062481c 0320f809 jalr t9
│ 0x00624820 ae02002c sw v0, 0x2c(s0)
│ 0x00624824 8fbc0010 lw gp, (var_10h)
│ 0x00624828 26040250 addiu a0, s0, 0x250
│ 0x0062482c 24060040 addiu a2, zero, 0x40
│ 0x00624830 8f8590e0 lw a1, -str.Ver(gp) ; [0x6c0000:4]=0x56657200 ; "Ver"
│ 0x00624834 8f999944 lw t9, -sym.imp.strncpy(gp) ; [0x65b870:4]=0x8f998010
│ 0x00624838 00000000 nop
│ 0x0062483c 0320f809 jalr t9
│ 0x00624840 24a55ecc addiu a1, a1, 0x5ecc ; 0x6c5ecc ; "MTKen7513IV" ; str.MTKen7513IV BU SATIRDA KEY VE IV BİLGİLERİ VARDIR!
│ 0x00624844 8fbf001c lw ra, (var_1ch)
│ 0x00624848 8fbc0010 lw gp, (var_10h)
│ 0x0062484c 00001021 move v0, zero
│ 0x00624850 8fb00018 lw s0, (var_18h)
│ 0x00624854 03e00008 jr ra
└ 0x00624858 27bd0020 addiu sp, sp, 0x20
Hocam bize cspd dosyasının bozulmamış halı gerekiyor. Bende 2.1 fw dosyası var çevrimiçi araçlarla cspd dosyasının içinde config.bin dosyasının şifrelenmesi için önemli fonksiyonların olduğunu tespit ettim. 2.1 fw dosyası daki cspd dosyası incelemeleri bana 2.1 için key ve Iv bilgileri sağladı. Bu key ve Iv bilgilerini elde ettiğimiz gibi bu dosyadan bunların nasıl kullanıldığını öğrenmekte önemli. Tabiki bu keyler tek başına çalışmıyor ama bu bana cspd dosyasının nasıl incelendiğini öğretti. Senden ricam bana o cspd dosyasını atabilir misin?

Çoğunlukta yetki hatası veriyor birkaçında sansürlü veri getiriyor daha output.txt'lere bakamadım bile. Kodu gözden geçirmem lazım,bi yerde hata yapmışım. Arayüzün yetkisi yüksek iken terminalde yetkim düşük bir üst kullanıcıya geçmem gerek.
Kodu çözmek için o okunmayan yerleri okumak için ghidra gibi güçlü tersine mühendislik uygulamaları gerekliymiş. Bu araçları sansürlü okunamayan yerler dediğimiz yerleri okuyabileceğimiz şekilde görmemize yardımcı oluyormuş.
 
Son düzenleme:
Hocam bize cspd dosyasının bozulmamış halı gerekiyor. Bende 2.1 fw dosyası var çevrimiçi araçlarla cspd dosyasının içinde config.bin dosyasının şifrelenmesi için önemli fonksiyonların olduğunu tespit ettim. 2.1 fw dosyası daki cspd dosyası incelemeleri bana 2.1 için key ve Iv bilgileri sağladı. Bu key ve Iv bilgilerini elde ettiğimiz gibi bu dosyadan bunların nasıl kullanıldığını öğrenmekte önemli. Tabiki bu keyler tek başına çalışmıyor ama bu bana cspd dosyasının nasıl incelendiğini öğretti. Senden ricam bana o cspd dosyasını atabilir misin?


Kodu çözmek için o okunmayan yerleri okumak için ghidra gibi güçlü tersine mühendislik uygulamaları gerekliymiş. Bu araçları sansürlü okunamayan yerler dediğimiz yerleri okuyabileceğimiz şekilde görmemize yardımcı oluyormuş.
Hiçbir şekilde veri alamıyorum, sıfırlayıp kurmam lazım. Fiberin gelmesi yakın, o zaman sana config.bin'i atarım.