cable modem password change

[leela]

hello hoping someone can help -
about 6 month ago i changed the username and password on my cable modem, thought i had saved it - but now i've come to need to access my modem and forgotten what username n passord i used.....
can i get round this

[drewmerc]

dump the modem via jtag open in an hex editor and search for the word password

[bakageta]

If you didn't change the telnet password, it's also possible to log into telnet and view the GUI password there. As seen here, you can use the following telnet command:

read_memory -s1 -n16384 0x9fd40000

It should spit out something like this, with the username and password in plaintext.

Code:

9fd44780: ff 00 00 00 46 49 4c 45 96 04 44 66 00 00 00 01 | ....FILE..Df....
9fd44790: 00 00 01 51 68 61 78 6f 72 77 61 72 65 2e 63 66 | ...Qhaxorware.cf
9fd447a0: 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | g...............
9fd447b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
9fd447c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
9fd447d0: 00 00 00 00 b9 a3 0f 25 5b 57 65 62 47 55 49 5d | .......%[WebGUI]
9fd447e0: 0a 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .Authentication
9fd447f0: 3d 20 27 66 61 6c 73 65 27 0a 55 73 65 72 6e 61 | = 'false'.Userna
9fd44800: 6d 65 20 3d 20 27 72 6f 6f 74 27 0a 50 61 73 73 | me = 'root'.Pass
9fd44810: 77 6f 72 64 20 3d 20 27 6b 30 6d 27 0a 5b 54 65 | word = '###'.[Te
9fd44820: 6c 6e 65 74 5d 0a 45 6e 61 62 6c 65 20 3d 20 27 | lnet].Enable = '
9fd44830: 74 72 75 65 27 0a 55 73 65 72 6e 61 6d 65 20 3d | true'.Username =
9fd44840: 20 27 72 6f 6f 74 27 0a 50 61 73 73 77 6f 72 64 | 'root'.Password
9fd44850: 20 3d 20 27 6b 30 6d 27 0a 5b 53 65 74 74 69 6e | = '###'.[Settin

[drewmerc]

haxorware's password location is dynamic that will not work everytime

[ABMJR]

If you forgot the password and you have a jtag, just do this

detect
erase 9FD40000 B0000

Then start over "clean"