Accessing root account on PLDT Home Fibr | Huawei HG8145V GPON

Lenz

Nobility
Staff member
Moderator
Joined
Nov 8, 2018
Messages
844
Reaction Score
974
Points
95
Location
Cebu
[I]Few assumptions and heads-up before we start:[/I]


  1. Assuming we do not know what the root password is and or we have failed cracking the hash.
  2. I have set my adminpldt account password to [I]“password123”[/I] for demonstration purposes.
  3. You have access to adminpldt account – as you might have already know, upon activation of your account, [I]PLDT Technicians/Engineers [/I]seems to change the password via [I]ACS / TR069 remote management[/I], which is another interesting subject.
  4. You’re doing this at your own risk!




If you’re unable to login using adminpldt, we can assume, that somebody might have changed the password already. You can factory reset your device, granting they didn’t remotely upgraded the firmware yet (yes they can do that!) else the supposed default credentials below won’t work.

username: [I]adminpldt[/I] | password: [I]1234567890[/I]
[SIZE=3]Let’s get started!
[/SIZE]


1. Access and login to your ONT. Default should be
You do not have permission to view link Log in or register now.







2. Navigate to System Tools > Configuration File[I]Download[/I] the configuration file, make sure to set aside the original config file (hw_ctree.xml), just make a copy of it and save as new file e.g. (root_hw_ctree.xml)






3. Open root_hw_ctree.xml using your favorite editor and search for the keyword “<UserInterface>”. Accounts: root, admin and adminpldt should be in there.


4. Copy the hash and salt from adminpldt account to root account as shown below. You can generate hash if you want, but for simplicity let’s just stick with this for now.






“password123”


5. Save and Upload the modified [I]config file[/I].






5. Your all set! Finally time to test! use your adminpldt password for root [I][ ssh || telnet <your ont’s ip> ][/I]












So there is a BusyBox Shell.. But upon checking commands and files, it seems the box is locked-down, but this is a good start to find other interesting stuff.


Well that’s it for now.



The post
You do not have permission to view link Log in or register now.
appeared first on
You do not have permission to view link Log in or register now.
.

You do not have permission to view link Log in or register now.
 

dondon100

Gentry
Stedfast
Joined
Jul 21, 2019
Messages
194
Reaction Score
36
Points
30
Age
32
Location
Leyte
Thanks keep sharing lodi
 
Starter Similar threads Forum Replies Date
Lenz Network Hardware 0

Similar threads


Top