F670Lv9.0 Telnet Access

[SpeedxThunder]

I already tried it but I found no useful info in it

 

[SpeedxThunder]

First decrypt the config with this command:
sendcmd 1 DB decry /userconfig/cfg/db_user_cfg.xml

Then upload it with this:
curl https://bashupload.com/db_user_cfg.xml -kT /tmp/debug-decry-cfg
You will get a link to the file which you can download and access

 

[SpeedxThunder]

@rohitks what is your firmware version?

 

[rohitks]

sendcmd 1 DB decry /userconfig/cfg/db_user_cfg.xml

just shows list of commands. See my earlier screenshot. I suspect this decry command is not available in my FW

Software Version V9.0.10P1N16B

 

[SpeedxThunder]

Can't you just unlock it?
Why do you need the file?

 

[rohitks]

@SpeedxThunder
Correct me if I am wrong. I suppose all config settings are in the file. Right now following ur procedure it's unlocked but settings are lost due to reset. I followed ur procedure to unlock it my changing country to china.

If I redo this is future after Airtel reinstating all settings, I need to know the values before.
So I though that file decrypted may be needed.
I am quite inexperienced in hacking routers!! Thx

 

[SpeedxThunder]

after unlocking airtel don't have any access to your ont at least not with tr-069
so they can't change any settings unless you setup their tr-069 config on a locked ont

 

[conquest]

Read all table names:
--------------------------------------------------
#sendcmd 1 DB all, output all table names
--------------------------------------------------

Read the specified table details:
--------------------------------------------------
#sendcmd 1 DB p <Table Name>.
--------------------------------------------------
To modify the value of a certain field in a table:
--------------------------------------------------
#sendcmd 1 DB set <Table name Row number Field name Field value>
--------------------------------------------------
for example, if you want to modify the super password above:
--------------------------------------------------
#sendcmd 1 DB set UserInfo 0 Password 123456
--------------------------------------------------

dd doesnt work with my router but cat can be used to dump the firmware into usb drive if mounted.

 

[scn]

I do this all stuff 1-2months ago, dbcry is removed in the new firmware, they removed it. I already have my configuration decoded with me when I was on old firmware which I use to look out my configuration, then I try to reset router while doing this and airtel pushed a new update and telnet stopped working but leaves me a decrypted configuration for my connection as I already copied

Thanks speedxhunter to finding a new python script. I was searching for so long to enable telnet on latest firmware

 

[rohitks]

@scn
I was suspecting that because the command in my case does not yield results, instead it just shows the list of available commands.
I suspect, soon airtel will find ways to block this telnet hack in future releses