{"id":390,"date":"2018-02-12T13:35:48","date_gmt":"2018-02-12T03:35:48","guid":{"rendered":"https:\/\/www.pavelchmelar.cz\/?p=390"},"modified":"2018-04-30T16:08:20","modified_gmt":"2018-04-30T06:08:20","slug":"security-tpg-modem-admin-bypass-to-enable-dsl","status":"publish","type":"post","link":"https:\/\/www.pavelchmelar.cz\/security-tpg-modem-admin-bypass-to-enable-dsl\/","title":{"rendered":"SECURITY: TPG modem admin bypass to enable DSL"},"content":{"rendered":"

Problem<\/strong>:<\/h3>\n

you have Huawei\u00a0HG659 that came from TPG pre-configured, but it doesn’t work on ADSL. You set up bridge mode to 3rd party ADSL modem and still no success. Reason being – it’s preconfigured for VDSL and you cannot change it without root admin access. On top, TPG won’t give you the password for root.<\/p>\n

Solution<\/strong>:<\/h3>\n

Forget about root admin and bypass root account by using your current user account, but with the admin interface. Then set up DSL connection instead of VDSL and you’re good to go.<\/p>\n

The bypass process is not complicated and takes about 10 minutes to complete, a general cmd line skills are required. If you run into troubles, hit me up (e-mail).<\/p>\n

Requirements:<\/h3>\n
    \n
  1. browser with an element inspector (safari, chrome, etc..)<\/li>\n
  2. details about your DSL connection<\/li>\n
  3. python compiler (https:\/\/python.org)<\/li>\n
  4. python cryptographic toolkit (https:\/\/pypi.python.org\/pypi\/pycrypto<\/li>\n
  5. python decryption script https:\/\/pastebin.com\/JbZjygY3<\/li>\n
  6. terminal \/ cmd line<\/li>\n<\/ol>\n

    Process:<\/h3>\n
      \n
    1. download and install all required stuff (point 3 and 4)<\/li>\n
    2. login to router administration via internet browser (192.168.1.1) with admin\/admin,\n
        \n
      1. bring up element inspector,<\/li>\n
      2. find a file called\u00a0cat_exember.js.jgz\u00a0<\/strong>under resource tab,<\/li>\n
      3. create a breakpoint on line 1,<\/li>\n
      4. refresh a\u00a0page and anytime it stops enter\u00a0g_userLevel=2<\/strong> into a console, hit enter and then press “continue debugger<\/strong>“<\/li>\n
      5. navigate yourself to\u00a0Management>Device Management>”Backup and restore settings” and download config file<\/strong>. Place the file into the same directory like a script from step 5.<\/li>\n<\/ol>\n<\/li>\n
      6. run terminal\/cmd line and navigate to a folder where you have a decryption script (hg635_configtool.py<\/strong>) as well as\u00a0downloadconfigfile.conf<\/strong> (downloaded in the previous step).<\/li>\n
      7. Run:\u00a0hg635_configtool.py decrypt downloadconfigfile.conf output.xml<\/strong><\/li>\n
      8. Edit file output.xml<\/strong>, find a line starting with\u00a0<UserInfoInstance InstanceID=”2″ Username=”admin”<\/strong> … and edit parametr\u00a0Userlevel=”1″<\/strong> to Userlevel=”2″<\/strong>. Save and exit.<\/li>\n
      9. Run: hg635_configtool.py encrypt output.xml output.conf<\/strong><\/li>\n
      10. Upload output.conf<\/strong> to a router via internet browser -> router administration -> “Maintain > Device Management > Backup or Restore Settings > Restore Settings > output.conf<\/strong>“. Use the hack from step 2 to see the menu. Once done, re-login to your router as normal.<\/li>\n
      11. To setup DSL, go to:\n
          \n
        1. Internet->Internet Settings->new WAN connection<\/strong> and fill your details. Once done, hit\u00a0apply.\u00a0<\/strong><\/li>\n
        2. Connect your DSL cable and hit restart PPPoE, wait 2 minutes and see if you’re connected.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

          Below is a screenshot of settings for Telstra \/ Bigpond broadband if that helps. Don’t forget to replace “USERNAME” with your username;). Happy surfing.<\/p>\n

          \"\"<\/a><\/p>\n

          Additional resources:<\/strong><\/p>\n

          http:\/\/forums.whirlpool.net.au\/archive\/2572047#r52554724<\/a><\/p>\n

          http:\/\/forums.whirlpool.net.au\/forum-replies.cfm?t=2572047&p=5&#r100<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

          Problem: you have Huawei\u00a0HG659 that came from TPG pre-configured, but it doesn’t work on ADSL. You set up bridge mode to 3rd party ADSL modem and still no success. Reason being – it’s preconfigured for VDSL and you cannot change it without root admin access. On top, TPG won’t give you the password for root. […]<\/p>\n","protected":false},"author":1,"featured_media":392,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[23],"tags":[77,76,71,75,78],"_links":{"self":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/390"}],"collection":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/comments?post=390"}],"version-history":[{"count":2,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/390\/revisions"}],"predecessor-version":[{"id":420,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/390\/revisions\/420"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/media\/392"}],"wp:attachment":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/media?parent=390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/categories?post=390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/tags?post=390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}