Another month, another router it seems. Got this one when the connection was upgraded to 500Mbps.

Does anyone have a firmware dump of the Hitron CHITA? Seems like most command injection bugs have been patched (some this year, even) and I'd love to find a way in.

Current firmware version is 7.2.2.0.5b6-CD

Can be done phison

(29-05-2022, 10:35 AM)andy m Wrote: Can be done phison

That would be great if I had a spare one, but it seems like they're so new there's none on ebay/gumtree/facebook marketplace/craigslist.

Hitron have beefed up their security game with this device, the config file is now AES encrypted in OpenSSL salted format (can't be decrypted by existing Hitron config decryption tools) and seems like all the command injection bugs from before got fixed or mitigated, plus the underlying software is newer and better (Yocto Project, miniupnpd replaced with libupnp, GoAhead WebServer replaced with lighttpd, dnsmasq upgraded, Linux kernel version 4.9.186).

Also I found some stuff in the Web UI code suggesting it might share a codebase with the CODA-4582, TPIA and CODA-5519, so if anyone has firmware of any of those models I'd be interested.

Come onto discord

(29-05-2022, 10:08 PM)andy m Wrote: Come onto discord

I found a discord invite on these forums but I'm not sure it's the right one, there's only a "shitposting" channel. EDIT: though I did scroll up and I can see cable modem related talk, so maybe it is the right one?

(30-05-2022, 06:39 AM)binkybonky Wrote:

(29-05-2022, 10:08 PM)andy m Wrote: Come onto discord

I found a discord invite on these forums but I'm not sure it's the right one, there's only a "shitposting" channel. EDIT: though I did scroll up and I can see cable modem related talk, so maybe it is the right one?

yeah it will be correct one