search

ozwaldorf / FIOS-G1100

All the current information on reverse engineering the FIOS-G1100 Quantum Gateway router
60 stars 6 forks source link

Changing the Configfile.bin to point to ACS for root access #6

Open hbgoodman opened 6 years ago

hbgoodman commented 6 years ago

Hi,

I'm looking to get root access to the G1100 router for learning purposes.

I finally got the decrypt and I've also got the encrypting to work with the configfile. I also setup the genieacs.

The G1100 WAN port has a new IP address 10.1.1.100. I have the ACS on IP address 10.1.1.200.

I'm a bit confused on what I need to change in the configfile to point it to my new genieacs, before I encrypted it again.

Can someone tell me what needs to be updated? I'm a bit confused by the instructions.

I thought I saw it somewhere here, but I can't find it now.

Thanks!

jameshilliard commented 6 years ago

I think these would be the relevant config nodes, you need to configure the ACS server to match:

           {
                "name": "net.tr69_client.management_server.url",
                "type": "string",
                "value": {
                    "value": "http://10.20.0.143:7547"
                }
            },
            {
                "name": "net.tr69_client.management_server.username",
                "type": "string",
                "value": {
                    "value": "test"
                }
            },
            {
                "name": "net.tr69_client.management_server.password",
                "type": "string",
                "value": {
                    "value": "test"
                }
            },
            {
                "name": "net.tr69_client.management_server.connection_request.port",
                "type": "unsigned integer",
                "value": {
                    "value": "4567"
                }
            },
            {
                "name": "net.tr69_client.management_server.connection_request.url",
                "type": "string",
                "value": {
                    "value": "http://:7547"
                }
            },
            {
                "name": "net.tr69_client.management_server.connection_request.username",
                "type": "string",
                "value": {
                    "value": "test"
                }
            },
            {
                "name": "net.tr69_client.management_server.connection_request.password",
                "type": "string",
                "value": {
                    "value": "test"
                }
            },
appleguru commented 5 years ago

I noticed I don't have a net.tr69_client.management_server.url entry in my current config file? Should I add it if it isn't present? Do I need to downgrade my fw?

jameshilliard commented 5 years ago

Not sure, what firmware version are you on?