I learned about how not too long ago, people would modify their modem configuration files in order to unlock higher speeds than what they paid for if anything at all. First, I generated a set of self-signed certificates for my new MAC address. My guess is that self-signed certificated are used by engineers to test the network and therefore do not allow access to the Internet.
Now my plan is to get a new set of certificates from an unactivated device. The reason for this model is purely because it was the cheapest one I could find. But unfortunately, no private keys.
From experience, it seems likely that the private keys would be stored close to the public keys, so I looked in the hex dump for possible candidates. There were blobs of random looking data in between some of the certificates.
It also appears that before each certificate is a two-byte length of the DER file. So I was able to parse the NV storage to dump the certificates, some plaintext setting and device information, as well as 0x2A0 sized blobs of data I previously saw. With that in mind, there is no way around having to reverse the firmware.
The last two entries in binwalk showed two large compressed chunks, which is a good start. I found another hacker has dealt with this kind of compression before and the trick was that the header was non-standard it lacked a valid uncompressed size field.
There were many references to 0x The load address was 0x Thankfully there are enough debug strings to narrow down the search for the decryption routine in the 16MiB firmware. Seems pretty promising. The input key is 21 bytes which is non-standard.
Then the 21 byte key, which is 8 groups of 7 bits is transformed into the standard representation of 8 groups of 8 bits where each group has a parity check. It was a fun journey, but out of caution, I will not be actually using this modem. Cloning MACs is too much intertwined with stealing internet service and although it is not something I ever intend to do, I do not want there to be any confusions between me, the government, and Big ISP.
As a result, it was just a fun exercise. As a word of advice to the reader, many people have been arrested for hacking modems. This site does not condone or promote any illegal activities and this post is presented only for education purposes and is more about reversing hardware then it is about bypassing restrictions. When I start to say I just need my modem provisioned, she wags her finger at me and mouths "NO" while shaking her head side-to-side.
When I kept trying, she simply turned her back on me and went back inside the other door. Needless to say, I'm REALLY mad now, and I was even considering trying to sneak in the back way and somehow get on the computers and provision it myself, but I eventually had to go home.
When I started to explain the "business class", he told me that he didn't know what I was told, but Adephia didn't have different tiers of service and he KNEW it because there was only one configuration file that they used. When I asked him why then Time Warner was at 45k he paused, then simply repeated that it was a government regulation.
At which point I then hung up, never to talk to Shadelphia again. Uncapping was considered by most people to be an internet MYTH at the time, so it took a sec, but eventually I did figure it out. Thanks in no small part to Tcniso. Which leads me to:. It was just so sad, seeing all the empty forums. Create new account Request new password. Note: Your post will require moderator approval before it will be visible. Paste as plain text instead. Only 75 emoji are allowed. Display as a link instead.
Clear editor. Upload or insert images from URL. Share More sharing options Followers 0. Reply to this topic Start new topic. Recommended Posts. Guest thecableguy Posted April 1, Posted April 1, Speed Kills? Link to post Share on other sites More sharing options Blunted 2 Posted April 1, TheHalf Posted April 1, Posted April 2, Did this guy get some kind of a fine for uncapping his modem?
Guest thecableguy Posted April 2, Swimmer Posted April 2, That is what you get when you abuse your equipment and the ISP.. My guess is that there is some type of fine involved if the police and FBI are called.
Blunted 2 Posted April 2, Join the conversation You can post now and register later.
0コメント