01-07-2015, 02:03 AM
(This post was last modified: 01-07-2015, 02:05 AM by Canis-Major.)
Okay, time for a quick tut..
1: take origional signed firmware, and remove p7 header..
2: add p7 header to config, there should be 4 lines, like you see in a config from a secure software download.
3: upload from modem one to modem 2 via tftp, ip obviously set to modem running the tftp.
No, I'm assuming we're trying to add stock firmware, as in origional signed firmware.. I'll dig out some demo config's and post them in a moment
1: take origional signed firmware, and remove p7 header..
2: add p7 header to config, there should be 4 lines, like you see in a config from a secure software download.
3: upload from modem one to modem 2 via tftp, ip obviously set to modem running the tftp.
(01-07-2015, 02:02 AM)Ziricom Wrote:(01-07-2015, 01:58 AM)Canis-Major Wrote: Actually yes, it's so simple it's staring you in the face.. for instance, if i was to add the p7 header we remove from firmware, and add to config (assuming we actually need any shared secret lol) in order to complete transfer/loading.. oh, and you dont need to be in factory mode to do this, but obviously factory mode is a necessity in understanding how to GAIN access..
Ahhhhhhhh I get ya i think you're saying add the p7 Header to non legitimate firmware and then you can load it?
No, I'm assuming we're trying to add stock firmware, as in origional signed firmware.. I'll dig out some demo config's and post them in a moment