Self-Signed Certs (Question)

[drewmerc]

i think its the communty string your after (never had to bother with certs myself so i could be wrong)

You need to look in the config file from your area.
Look for this OID in Vulture ware.
"docsDevNmAccessCommunity"

also

1. Save original copy of your config.
2. Open config in VultureWare Docsis Editor (http://www.vulturesnest.net/cfgedit.html) don't change anything and just save it. Editor will ask for auth string. Leave it blank. Just press ok.
3. With Docsis 0.9.5 (http://sourceforge.net/projects/docsis/files/) decode both configuration files and compare CmMic and CmtsMic lines in both files. If they are identical, your ISP uses no share secret. Like mine So you can set Download and Upload to 0 in VultureWare Docsis Editor, save the config with empty auth string, and upload config to modem, reboot it and enjoy full speed.

By the way some ISPs use outdated CMTS which do not check if Mic lines are present in config files. On that CMTS you can bypass Mic checks by stripping them from config file with TCNISO MD5Remover (or just hexeditor) even if shared secret is used. But your modem firmware should support config file without Mic lines. As far as I know, Haxorware supports this feature but SB5100MoD not.

In case that above variants are not applicable, you can try to bruteforce Mics by TCNISO DiFileCPE. By the way somebody tryed PasswordsPro? (http://www.insidepro.com/eng/passwordspro.shtml) it supports HMAC-MD5.