Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Extract locked firmware
convict Offline
Junior Member
**

Posts: 5
Threads: 1
Joined: Mar 2013
Reputation: 0
#1
Extract locked firmware
I have a NetGear CG3000-1STAUS which is a ISP type modem.
So unlike normal modems its Advance features are missing one being to upgrade/backup firmware.

I've used Teleport Pro and it shows only the same options i see (log into Modem), No hidden features, No even the RgNatControl.asp hidden page.

So what tool/s can I use to extract its firmware. And once extracted and haxed, Is there a tool that would reflash it.
13-03-2013, 07:01 AM
Find Reply
SlowGrind6 Offline
Senior Member
****

Posts: 185
Threads: 3
Joined: Feb 2011
Reputation: 12
#2
RE: Extract locked firmware
Here is a page that you might be interested in.

http://kb.netgear.com/app/answers/detail...rogrammers
13-03-2013, 07:18 AM
Find Reply
convict Offline
Junior Member
**

Posts: 5
Threads: 1
Joined: Mar 2013
Reputation: 0
#3
RE: Extract locked firmware
(13-03-2013, 07:18 AM)SlowGrind6 Wrote: Here is a page that you might be interested in.

http://kb.netgear.com/app/answers/detail...rogrammers

Yes i have seen that open-source page, However one would need to code and compile under linux - I cant do that. And even if i could there is still no way to flash/force flash it to the Modem Router.

I can use IDA pro / SoftIce / Hex editor etc, But there of no use unless i can access the router directly through USB which on this model is disabled so i am f@#ked there too.

EDIT> NetGear have a Firmware recovery tool, However i dont know if it will work for this modem.
13-03-2013, 07:47 AM
Find Reply
convict Offline
Junior Member
**

Posts: 5
Threads: 1
Joined: Mar 2013
Reputation: 0
#4
RE: Extract locked firmware
Ok well can anyone tell me if it is at all possible to extract the firmware from this modem via Telnet or some other program.
I have search this forum and others but had found nothing.

If a ISP Updates your Modem's firmware from there end surely there has to be a way of doing it my end.

If the Router has features locked via firmware - Would it still be possible to add some thing like 192.168.0.1/RgBackup.asp.htm via Teleport pro?
I would need the correct htm address name if some one has it please let me no.
13-03-2013, 01:19 PM
Find Reply
sixteen Offline
Haxorware Expert
*****

Posts: 390
Threads: 33
Joined: Apr 2012
Reputation: 6
#5
RE: Extract locked firmware
(13-03-2013, 01:19 PM)convict Wrote: Ok well can anyone tell me if it is at all possible to extract the firmware from this modem via Telnet or some other program.
I have search this forum and others but had found nothing.

If a ISP Updates your Modem's firmware from there end surely there has to be a way of doing it my end.

If the Router has features locked via firmware - Would it still be possible to add some thing like 192.168.0.1/RgBackup.asp.htm via Teleport pro?
I would need the correct htm address name if some one has it please let me no.

Go here all you need is right there http://www.usbjtag.com/jtagnt/modem/CG3100D.php
(This post was last modified: 13-03-2013, 02:28 PM by sixteen.)
13-03-2013, 02:27 PM
Find Reply
drewmerc Offline
Prefect
******

Posts: 3,902
Threads: 19
Joined: Oct 2008
Reputation: 157
#6
RE: Extract locked firmware
it's spi based so you can dump it with any $10 spi flasher
__________________________________________________________________________________
******new discord chat link https://discord.gg/5BQQbsb*******
13-03-2013, 07:13 PM
Website Find Reply
convict Offline
Junior Member
**

Posts: 5
Threads: 1
Joined: Mar 2013
Reputation: 0
#7
RE: Extract locked firmware
Thanks for the feedback guys, But i have no idea on spi flashing and it sounds like its expensive not the so called $15 bucks more like $60 then there is software you need for dumping. Honestly I may as Turn NAT option off and go buy a router with a USB port for a my external hard-drive.
I seriously didn't think it would be such a F@#k around to unlock something like this.

And Sixteen thanks for posting the link, However the guys at that site refuse to help anyone unless you use there hardware, Even trying to get a hold of the extracted firmware is impossible.
15-03-2013, 10:33 AM
Find Reply
drewmerc Offline
Prefect
******

Posts: 3,902
Threads: 19
Joined: Oct 2008
Reputation: 157
#8
RE: Extract locked firmware
ww.ebay.com/itm/EN25T80-Programmer-USB-Series-SPI-FLASH-BIOS-24CXX25XX-STC-AVR-Support-TO-TTL-A-/300797698192?pt=LH_DefaultDomain_0&hash=item4608f0a090

25xx spi flash in the netgear but you gotta love stupidity of people who think the only way to flash is a NT
__________________________________________________________________________________
******new discord chat link https://discord.gg/5BQQbsb*******
15-03-2013, 11:55 AM
Website Find Reply
SlowGrind6 Offline
Senior Member
****

Posts: 185
Threads: 3
Joined: Feb 2011
Reputation: 12
#9
RE: Extract locked firmware
(15-03-2013, 10:33 AM)convict Wrote: Thanks for the feedback guys, But i have no idea on spi flashing and it sounds like its expensive not the so called $15 bucks more like $60 then there is software you need for dumping. Honestly I may as Turn NAT option off and go buy a router with a USB port for a my external hard-drive.
I seriously didn't think it would be such a F@#k around to unlock something like this.

And Sixteen thanks for posting the link, However the guys at that site refuse to help anyone unless you use there hardware, Even trying to get a hold of the extracted firmware is impossible.

As Drew said you don't need the NT to flash the modem or extract the firmware. It is just a nice GUI and you have support if something doesn't work out. The link in drews post will extract the image and allow you to update the image on the modem as well. I don't know of any other way to extract the image other than downloading it from your ISP and the opening it up and looking at it in IDA. You have to know the file name and server address to download it from your ISP. You will have to unpack it and then load it in IDA at the right address. Having this small and cheap programmer will show you some of these things.
(This post was last modified: 15-03-2013, 12:16 PM by SlowGrind6.)
15-03-2013, 12:15 PM
Find Reply
flashgordon Offline
Haxorware Enthusiast
***

Posts: 98
Threads: 9
Joined: Jan 2013
Reputation: 8
#10
RE: Extract locked firmware
just telnet into it you can upload or download what you like i did Smile
if you cant test dont invest !!!!!
15-03-2013, 12:39 PM
Find Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)