boginw / zyxel-vmg8825-keygen

A key generator for Zyxel VMG8825-T50
GNU General Public License v2.0
18 stars 6 forks source link

Works for VMG3625-T50B #2

Open LoonyWarrior opened 1 year ago

LoonyWarrior commented 1 year ago

Hi, I just want to mention that this also work for VMG3625-T50B

I was able to get supervisor password with zcfgBeCommonGenKeyBySerialNumMethod3

Thank you!

LoonyWarrior commented 1 year ago

Also works for older VMG3625-T20A

boginw commented 1 year ago

That's great, thanks for the tip! Perhaps this repo should be renamed to be more general zyxel-keygen instead.

In my case the password from ... Method3 was also the password for the root user, which is only accessible through SSH. Is this also the case with the routers you mentioned?

LoonyWarrior commented 1 year ago

Hi, yes, root shares same password as supervisor on both routers. SSH also accessible on both devices.. ;)

altineller commented 1 year ago

@LoonyWarrior I tested it with a VMG3625-T50B - and it does not work. I have firmware V5.50(ABPM.5)G0 - Do you have the same firmware? Maybe I am doing something wrong. Do we need to anything besides enabling telnet and ssh, and trying the password with root or supervisor?

Best Regards, C.

LoonyWarrior commented 1 year ago

@altineller Hi, didn't have to do anything special. Just one note, for web interface I can use only the supervisor account, root works only for SSH.

I'm currently using V5.50(ABPM.7.1)C0, but I doubt that it matter since I was able to generate correct password for older model (VMG3625-T20A).

By the way, I was looking for download link of the firmware and found out that there is new release V5.50(ABPM.7.3)C0 (January 31, 2023).

Is your modem/router from ISP or it's from "free market"? I bought both my devices directly from shop, so they are not altered by ISP.

I will also mention blog post that originally brought me here. So it should be possible even with device from ISP.

"I have" one VMG3625-T50B provided by O2, but it's in the cottage and I will go there probably not until summer.

LoonyWarrior commented 1 year ago

@altineller By the way, how does your SN looks like? Does it start with "S"?

S220Y09042--- S194108016--- S190Y51015---

SN from script manual also looks like that: S123Y12345678

Generated password has always 10 characters.

rodrigoaguilera commented 1 year ago

I can confirm it works to get the admin password for the AX7501-B0 with the zcfgBeCommonGenKeyBySerialNumMethod3

szampardi commented 1 year ago

also works for VMG4005-B50A, at least w/ firmware V5.15(ABQA.1)C0 zcfgBeCommonGenKeyBySerialNumMethod3 password works for both supervisor and root users, btw

rodrigoaguilera commented 1 year ago

Some people are reporting that the algorithm doesn't work anymore with the AX7501-B1 (a small step from B0 I guess) so probably zyxel is updating the algorithm in all the devices.

Source in Spanish: https://bandaancha.eu/foros/zyxel-ax7501-b0-fibra-10gb-modo-bridge-1743833/2

mrplow87 commented 9 months ago

also works for VMG4005-B50A, at least w/ firmware V5.15(ABQA.1)C0 zcfgBeCommonGenKeyBySerialNumMethod3 password works for both supervisor and root users, btw

can confirm this for latest firmware (as of this post) V5.15(ABQA.2)C0