negan07 / ancistrus

Netgear's D7000 Nighthawk Router Experience Distributed Project
https://negan07.github.io/ancistrus/
GNU General Public License v2.0
66 stars 17 forks source link

Updated Netgear firmware: V1.0.1.82 - Rescue firmware #84

Closed negan07 closed 2 years ago

negan07 commented 2 years ago

Here's gpl code differences between 1.0.1.80 & 1.0.1.82

diff-D7000_V1.0.1.80-82.zip

Since V1.0.1.80 firmware version, debug mode console access activation from web gui and telnetenabled udp magic packet, have been removed avoiding the possibility of initializing the router for package installations.

rescue .img firmware

This is the vendor .img firmware, recompiled with kernel & flag optimizations and garbage file removals, including: /usr/sbin/rc_app/rc_debug_mode startup service script.

Telnet daemon is activated as default setting. To prevent eventually further similar security leaks, the telnet daemon can be started only if https router web gui remote login is disabled ( webGUI-->Advanced-->Advanced Setup-->Remote Management ).

To deactivate it permanently (factory reset required to reactivate it), type:

nvram set telnet_enable=0
rc debug_mode stop

To deactivate it temporary (until next reboot), type: rc debug_mode stop

No remote telnet access is possible because the connection would be not encrypted and unsafe.

Buckchoi commented 2 years ago

@negan07 An updated firmware version 1.0.1.84 has been released.