I am working on improving somewhat this project, for the C6 v2 Archer, which seems to be using something similar to the C9 (Lua interface)
I have managed to implement logging into the router using RSA encryption, with some caveats.
REFERENCES
1) RSA encryption uses this library: http://www-cs-students.stanford.edu/~tjw/jsbn/
Using this, I can generate the approriate signatures. However, my python scripts do not correspond (yet to this protocol). Seems to be PKCS1 v1.5
I am working on improving somewhat this project, for the C6 v2 Archer, which seems to be using something similar to the C9 (Lua interface)
I have managed to implement logging into the router using RSA encryption, with some caveats.
REFERENCES 1) RSA encryption uses this library: http://www-cs-students.stanford.edu/~tjw/jsbn/ Using this, I can generate the approriate signatures. However, my python scripts do not correspond (yet to this protocol). Seems to be PKCS1 v1.5
2) Tried the following: https://stackoverflow.com/questions/59063930/implementing-rsa-pkcs1-padding-in-python-3-x
3) A lot on info on TPlink router: https://github.com/ocastejon/exploits OR https://the-hyperbolic.com/posts/hacking-the-tlwpa4220-part-3/
Also looking at https://github.com/marcnewlin/ax1500-crypto-client/blob/master/ax1500-poc.py
My problem so far is getting the RSA protocol right. Once this is done, I will post results here.