29-05-2022, 04:58 PM
(This post was last modified: 29-05-2022, 05:40 PM by binkybonky.)
(29-05-2022, 10:35 AM)andy m Wrote: Can be done phison
That would be great if I had a spare one, but it seems like they're so new there's none on ebay/gumtree/facebook marketplace/craigslist.
Hitron have beefed up their security game with this device, the config file is now AES encrypted in OpenSSL salted format (can't be decrypted by existing Hitron config decryption tools) and seems like all the command injection bugs from before got fixed or mitigated, plus the underlying software is newer and better (Yocto Project, miniupnpd replaced with libupnp, GoAhead WebServer replaced with lighttpd, dnsmasq upgraded, Linux kernel version 4.9.186).
Also I found some stuff in the Web UI code suggesting it might share a codebase with the CODA-4582, TPIA and CODA-5519, so if anyone has firmware of any of those models I'd be interested.