https://verymoe.vercel.app/tags/hs8145v/Recent content in HS8145V on ShiroHugo -- gohugo.ioen-usSun, 02 Feb 2020 00:00:00 +0800https://verymoe.vercel.app/posts/crack-telecom-modem-hs8145v-super-password/Sun, 02 Feb 2020 00:00:00 +0800https://verymoe.vercel.app/posts/crack-telecom-modem-hs8145v-super-password/<blockquote class="alert alert-note"> <div class="alert-header"> <span class="alert-icon">📝</span> <span class="alert-title"><br></span> </div> <div class="alert-body"> <p>此文章恢复自过去的博客站点，仅作纪念保留。<br> 原文发布于 2020-02-02<br> 原始地址：<a class="link" href="https://justmyblog.net/post/105.html" target="_blank" rel="noopener" >https://justmyblog.net/post/105.html</a><br> Web Archive：<a class="link" href="https://web.archive.org/web/20210509214415/https://justmyblog.net/post/105.html" target="_blank" rel="noopener" >https://web.archive.org/web/20210509214415/https://justmyblog.net/post/105.html</a></p> </div> </blockquote> <p>家里有一台电信的HS8145V光猫,但是普通账号(useradmin)的权限实在是太少了,而超级账号(telecomadmin)多了许多实用的功能,比如DDNS(动态域名)和QoS功能以及其它实用功能(破解后自己慢慢玩吧),下面开始破解!</p> <blockquote class="alert alert-warning"> <div class="alert-header"> <span class="alert-icon">⚠️</span> <span class="alert-title">Warning</span> </div> <div class="alert-body"> <p>破解效果:破解后普通账号登录即为超级账号页面,密码不会被更新!</p> </div> </blockquote> <p><img alt="光猫HS8145V" class="gallery-image" data-flex-basis="363px" data-flex-grow="151" height="1726" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IK7g.jpg!webp" srcset="https://verymoe.vercel.app/IK7g_6611602536772548602_hu_f758fe4baa587cf4.webp 800w, https://verymoe.vercel.app/IK7g_6611602536772548602_hu_c58503cb50e5bc48.webp 1600w, https://verymoe.vercel.app/IK7g_6611602536772548602_hu_ef7d662a9d648a4e.webp 2400w, https://assets.moedev.cn/blog/photo/images/2020/IK7g.jpg!webp 2616w" width="2616"></p> <blockquote class="alert alert-caution"> <div class="alert-header"> <span class="alert-icon">🚨</span> <span class="alert-title">Caution</span> </div> <div class="alert-body"> <p>参考文章链接和工具链接均在文章下方,超级密码不适合所以用户使用,还请自行判断,在破解开始前请先完整阅读本文章,如果破解失败请自行检查,确认方法无误,实在不行在下发评论留言说明问题</p> </div> </blockquote> <h2 id="破解步骤">破解步骤: </h2><ol> <li>备份(记下loid即可)</li> <li>重置</li> <li>选择地区</li> <li>下载配置</li> <li>解密和修改配置</li> <li>上传配置</li> <li>配置网络</li> </ol> <h2 id="第一步记下loid">第一步(记下loid) </h2><p>记录下自己的loid信息以及自己的宽带账号和密码(宽带账号和密码不知道的找电信营业厅查询)</p> <p><img alt="登录网关" class="gallery-image" data-flex-basis="413px" data-flex-grow="172" height="598" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IpHC.jpg!webp" srcset="https://verymoe.vercel.app/IpHC_13625810678905566313_hu_65a21347c1965532.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IpHC.jpg!webp 1030w" width="1030"> <img alt="记录loid" class="gallery-image" data-flex-basis="430px" data-flex-grow="179" height="700" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IG2N.jpg!webp" srcset="https://verymoe.vercel.app/IG2N_14339115575172703358_hu_f7eabe7e1d74f0c4.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IG2N.jpg!webp 1257w" width="1257"></p> <p>宽带账号密码在后期网络配置需要用到,请自行登录营业厅查询!</p> <h2 id="重置光猫恢复默认超级密码">重置光猫(恢复默认超级密码) </h2><blockquote class="alert alert-warning"> <div class="alert-header"> <span class="alert-icon">⚠️</span> <span class="alert-title">Warning</span> </div> <div class="alert-body"> <p>提示一:先拔下光纤！！！不然下发配置后超级密码就变了</p> </div> </blockquote> <p>然后长按光猫背面reset键,直到所有灯亮起并熄灭!!!(也就是所以灯亮起后再熄灭才松手!大概10秒钟,否则无法完全重置,后期修改地区时光猫会提示注册过无法修改地区)</p> <p><img alt="重置光猫" class="gallery-image" data-flex-basis="427px" data-flex-grow="177" height="567" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IIz1.jpg!webp" srcset="https://verymoe.vercel.app/IIz1_8679265633085679903_hu_7539987343cc9e16.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IIz1.jpg!webp 1009w" width="1009"></p> <p>等待光猫重置后进入网关管理页面<a class="link" href="http://192.168.1.1/" target="_blank" rel="noopener" >传送门</a></p> <p>因为配置重置了所以这个时候会要求填写loid和密码,不用管。</p> <p>现在已经能够进入超级账号并修改设置了,但是网络配置好后,电信一旦下发配置默认超级密码就会被修改,所以还没有弄完,还要继续。</p> <h2 id="修改地区">修改地区 </h2><p>打开浏览器(接下来示范用的谷歌浏览器)进入http://192.168.1.1:8080/loidchoosearea.asp (<a class="link" href="http://192.168.1.1:8080/loidchoosearea.asp" target="_blank" rel="noopener" >传送门</a>)</p> <p><img alt="地区修改" class="gallery-image" data-flex-basis="422px" data-flex-grow="176" height="538" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IJNx.jpg!webp" srcset="https://verymoe.vercel.app/IJNx_14506770870125885650_hu_57f0be52d33b9878.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IJNx.jpg!webp 948w" width="948"></p> <p>这个时候会要求输入密码,让我们忽略这个密码当它不存在</p> <p><img alt=":huaji15:" class="gallery-image" data-flex-basis="287px" data-flex-grow="119" height="56" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/huaji15.png!webp" width="67"></p> <p>接下来的操作看好了</p> <p>光标移动到密码框的位置然后右键</p> <p><img alt="选择检查" class="gallery-image" data-flex-basis="331px" data-flex-grow="138" height="579" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IX6X.jpg!webp" width="800"></p> <p>找到“ChooseAreaModule”</p> <p><img alt="搜索“ChooseAreaModule”" class="gallery-image" data-flex-basis="289px" data-flex-grow="120" height="756" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IZB4.jpg!webp" srcset="https://verymoe.vercel.app/IZB4_16288492252523702460_hu_2d4ea3f1132c420d.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IZB4.jpg!webp 912w" width="912"></p> <p>删除“display:none;”</p> <p><img alt="删除“display:none;”" class="gallery-image" data-flex-basis="289px" data-flex-grow="120" height="755" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IwI8.jpg!webp" srcset="https://verymoe.vercel.app/IwI8_10886112774565284619_hu_89c2e38c1a628f5e.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IwI8.jpg!webp 912w" width="912"></p> <p>然后回到地区选择页面就可以看到效果了</p> <p><img alt="选择地区" class="gallery-image" data-flex-basis="318px" data-flex-grow="132" height="764" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IN5G.jpg!webp" srcset="https://verymoe.vercel.app/IN5G_1120341894500867983_hu_9a3f24a9420616e4.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IN5G.jpg!webp 1013w" width="1013"></p> <p>现在就可以选择地区了</p> <p>选择地区,然后等待光猫自动配置然后重启,再继续下面的步骤</p> <blockquote class="alert alert-warning"> <div class="alert-header"> <span class="alert-icon">⚠️</span> <span class="alert-title">Warning</span> </div> <div class="alert-body"> <p>提示二:部分地区可能会卡在0%,如果卡在0%超过5分钟,可能是你的光猫无需配置地区,就忽略选择地区这个步骤</p> </div> </blockquote> <h2 id="下载配置">下载配置 </h2><p>在光猫后面插入一个U盘</p> <p>然后登录网关管理页面输入默认超级账号和超级密码并登录(超级账号:telecomadmin 超级密码:nE7jA%5m &gt;)</p> <blockquote class="alert alert-warning"> <div class="alert-header"> <span class="alert-icon">⚠️</span> <span class="alert-title">Warning</span> </div> <div class="alert-body"> <p>提示三:因为还没有配置网络,所以输入192.168.1.1会自动导向loid配置(设备注册页面)直接忽略就行了,右上角有返回登录页面的链接</p> </div> </blockquote> <p>选择管理&gt;设备管理&gt;选择u盘分区&gt;再点击备份配置(别选中快速恢复和覆盖备份文件)</p> <p>(我这里示范没有插入U盘,所以显示没有存储分区)</p> <p><img alt="备份配置" class="gallery-image" data-flex-basis="331px" data-flex-grow="138" height="872" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IU7A.jpg!webp" srcset="https://verymoe.vercel.app/IU7A_3737141539296926801_hu_68e9b866eb5487bd.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IU7A.jpg!webp 1204w" width="1204"></p> <p>备份成功后拔下U盘插到电脑上并打开然后准备好华为二次密码破解工具(文章末尾有工具下载链接)</p> <h2 id="解密和修改配置">解密和修改配置 </h2><p>进入U盘里面名为e8_Config_Backup的文件夹,会有一个后缀为.cfg文件,这就是配置文件,但是现在还无法打开,因为被加密了</p> <p><img alt="CFG文件" class="gallery-image" data-flex-basis="408px" data-flex-grow="170" height="779" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IeKt.jpg!webp" srcset="https://verymoe.vercel.app/IeKt_578060761165213053_hu_a97ae90b2adb5ae6.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/IeKt.jpg!webp 1327w" width="1327"></p> <p>打开华为二次密码破解工具,选择配置文件,然后解密</p> <p><img class="gallery-image" data-flex-basis="243px" data-flex-grow="101" height="361" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/IgmK.jpg!webp" width="366"></p> <p>现在回到U盘里的文件夹,会有两个文件,删掉前面有old_的不管</p> <p>然后打开另一个文件(可以用万能的记事本打开)</p> <p>搜索X_HW_WebUserInfoInstance InstanceID=&ldquo;1&rdquo;，将后面的UserLevel修改为0,就可以将useradmin改为超级用户</p> <p><img alt="修改权限" class="gallery-image" data-flex-basis="433px" data-flex-grow="180" height="590" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/Ii2W.jpg!webp" srcset="https://verymoe.vercel.app/Ii2W_5499881393085669116_hu_a1bef731c92e2e76.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/Ii2W.jpg!webp 1066w" width="1066"></p> <p>修改后保存再打开华为二次密码破解工具并加密</p> <p><img alt="加密配置文件" class="gallery-image" data-flex-basis="241px" data-flex-grow="100" height="362" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/ImzH.jpg!webp" width="364"></p> <p>再打开U盘里的文件夹,删掉前面有old_的不管,然后把U盘插回光猫</p> <h2 id="上传配置">上传配置 </h2><p>用超级账号登录光猫后台</p> <p>选择管理&gt;设备管理&gt;选中快速恢复再选择u盘分区&gt;再点击恢复默认配置</p> <p>(记得选中快速恢复再点击恢复默认配置,这个时候从U盘里的配置文件恢复)</p> <p>然后等待光猫恢复后重启,等能够连接后再拔下U盘</p> <p>然后再用普通账号(useradmin)登录光猫,这个时候普通账号登录进去就是超级管理页面了!(如果进去不是的话就失败了,请自行复读教程检查错误,实在不行再在文章下评论留言问题 &amp; 192.168.1.1会被自动导向参见提示三)拥有所有修改权限,破解到此就完成一半了!</p> <h2 id="配置网络">配置网络 </h2><p>进入loid配置页面(设备注册)http://192.168.1.1:8080/loidgregsuccess.asp (<a class="link" href="http://192.168.1.1:8080/loidgregsuccess.asp" target="_blank" rel="noopener" >传送门</a>)</p> <p>输入你的loid,密码留空,然后点击确定等待设备注册完毕!</p> <p><img alt="注册设备" class="gallery-image" data-flex-basis="393px" data-flex-grow="164" height="309" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/InUD.jpg!webp" width="507"></p> <p>设备注册完后登录光猫,完毕!(注册完后默认为桥接模式,需要电脑拨号上网,下面是修改为光猫做路由器的教程)</p> <blockquote class="alert alert-note"> <div class="alert-header"> <span class="alert-icon">📝</span> <span class="alert-title">Note</span> </div> <div class="alert-body"> <p>下面给使用光猫拨号的人看(路由模式配置)</p> </div> </blockquote> <p>选择网络&gt;网络设置</p> <ol> <li> <p>连接名称选有internet那个</p> </li> <li> <p>连接模式选路由</p> </li> <li> <p>用户名和密码分别输入宽带账号和宽带密码</p> </li> <li> <p>拨号方式选自动</p> </li> <li> <p>保存</p> </li> </ol> <p><img alt="网络配置" class="gallery-image" data-flex-basis="230px" data-flex-grow="95" height="836" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://assets.moedev.cn/blog/photo/images/2020/Ir6u.jpg!webp" srcset="https://verymoe.vercel.app/Ir6u_15288684328702430213_hu_414611aaca42b7bf.webp 800w, https://assets.moedev.cn/blog/photo/images/2020/Ir6u.jpg!webp 802w" width="802"></p> <blockquote class="alert alert-note"> <div class="alert-header"> <span class="alert-icon">📝</span> <span class="alert-title">Note</span> </div> <div class="alert-body"> <p>终于写完了剩下的设置自己慢慢尝试吧</p> </div> </blockquote> <blockquote> <p><strong>工具下载</strong> 蓝奏云: <a class="link" href="https://www.lanzous.com/i906cah" target="_blank" rel="noopener" >云盘下载</a></p> </blockquote> <blockquote> <p><strong>参考文章</strong></p> </blockquote> <p><a class="link" href="http://www.chinadsl.net/forum.php?mod=viewthread&amp;tid=150832&amp;fromuid=96316" target="_blank" rel="noopener" >http://www.chinadsl.net/forum.php?mod=viewthread&amp;tid=150832&amp;fromuid=96316</a></p> <p><a class="link" href="http://www.shawze.com/2018/07/02/%E5%8D%8E%E4%B8%BA%E5%85%89%E7%8C%ABHS8145V%E8%8E%B7%E5%8F%96%E8%B6%85%E7%BA%A7%E5%AF%86%E7%A0%81-%E9%85%8D%E7%BD%AE%E7%BD%91%E7%BB%9C/" target="_blank" rel="noopener" >http://www.shawze.com/2018/07/02/%E5%8D%8E%E4%B8%BA%E5%85%89%E7%8C%ABHS8145V%E8%8E%B7%E5%8F%96%E8%B6%85%E7%BA%A7%E5%AF%86%E7%A0%81-%E9%85%8D%E7%BD%AE%E7%BD%91%E7%BB%9C/</a></p>