Skip to main content

Bongkar User & Password Indiehome di ZTE F660

Router yang kebanyakan dibundling dengan paket Indiehome Telkom biasanya adalah router ZTE F660. Router ini memiliki beberapa misteri yang masih membuat saya penasaran, salah satunya yang sudah terpecahkan adalah mencari nomor Indiehome dan passwordnya yang kebetulan saya tidak diberi oleh pihak Telkom. 

Ikuti langkah - langkah berikut untuk membuka semua password dan username yang tersimpan di router ini unencrypted. 
  1. Buka koneksi telnet, bisa pakai Windows Telnet Client, Putty, ZOC, dsb
  2. Koneksi ke IP router anda dengan mengetikkan telnet 192.168.x.x
  3. Jika ditanya user dan password, masukkan root dan password Zte521
  4. File konfigurasi tersimpan di /userconfig/cfg/db_user_cfg.xml
  5. Buka dan baca file tersebut dengan menggunakan perintah cat
  6. cat /userconfig/cfg/db_user_cfg.xml
  7. Untuk memudahkan pencarian username maupun password silahkan ditambahkan pipe grep
  8. Pencarian username cat /userconfig/cfg/db_user_cfg.xml | grep UserName
  9. Pencarian password cat /userconfig/cfg/db_user_cfg.xml | grep Password
Contoh hasil pencarian UserName

Pada gambar diatas yang saya sensor dengan warna merah merupakan nomor SIP, sedangkan yang disensor dengan warna biru merupakan nomor Indiehome. 

Contoh hasil pencarian password
Pada gambar pencarian password, warna merah adalah password untuk SIP, warna Aqua adalah password WiFi, warna kuning adalah password router, dan warna biru merupakan password untuk Indiehome. Pada file ini terdapat berbagai macam informasi yang mungkin dapat anda gunakan untuk lebih mengenal router anda sendiri.

Comments

  1. Makasih mas felangga informasinya sangat membantu

    ReplyDelete
  2. Primero que todo muchas gracias por compartir tu conocimiento.
    Tengo una pregunta al intentar abrir el archivo con ZOC, este es el error que sale:

    / # cat /userconfig/cfg/db_user_cfg.xml
    Î^_3 %«uöʽ $ lxÚí][wÛ8’~ß_áÍî¼Ìl Þ%ùLï ™” žÖ… e»7/94 IœP$›¤|é_¿u£@ %Ù‘ ¹Ó±ã* Ū¯
    …".þ÷?þ9|ô/ g ~ûd\]9 øtŸõp ¤¿} ?A øÏ‹^øÛ' ýÃè.™Ík3 ‡Ÿ.ž ’DøŸÙ½¥(ðwðK ”kôýÓ øñ/°1ô
    vºÕõC«gpv|ïç üiÙµycÔ 1k}̓š+ ¥@Õ
    ݉\/}]r`Ÿ ÆÞd âvàOÇ ~äôQ 9Ú"²ž3N ÂC ܪÙ2
    ¡%úÓêa ЩtËo”Y´J±¦m Í~o›ÇNc /I‰m`DL„‡0þa^w wI +—K§~9 .›.ü³Ín&½ÖÜ’™\‡ñ³ Èê0 Œo ÈDÃÖ­%å3¤QhCB¸‡š5

    ReplyDelete
    Replies
    1. Hi,
      First, please comment in English or Bahasa.
      I think that file of yours is corrupted or encrypted.
      What is your router firmware version ? Mine is V2.30.20P8T8S.

      Delete
    2. My file is the encrypted like above. Is there any way to decrypt it?

      Delete
    3. Can you send me the encrypted file ?

      Delete
    4. i tried copying it, but with no luck. i could not make tftp work for me.
      also, if i do cat, the contents will not be the same. do you know how can i base64 encode the file from command line?

      Delete
  3. share donk di firmware ZTE F660 V2.30.20P8T8S .mau apgred.gak ad no-ip
    ato send di judyanmary@yahoo.co.id / gamblisgamblis@gmail.com

    Thank's

    ReplyDelete
  4. ada tips buat aktifkan file sharing di port usb nya ga? sy coba2 kok ga sukses ya.. :(

    ReplyDelete
  5. SOb bisa add bbm ane gg???? Ane mau blajar
    537ac621

    ReplyDelete
  6. SOb bisa add bbm ane gg???? Ane mau blajar
    537ac621

    ReplyDelete
  7. SOb bisa add bbm ane gg???? Ane mau blajar
    537ac621

    ReplyDelete
  8. cara memerintah cat nya gmana gan ?

    ReplyDelete
  9. bang, ini kan teknik setelah terhubung ke jaringan wifi ztenya, kalo dari sebelum terhubung kejaringan gimana..??

    ReplyDelete
    Replies
    1. Harus masuk dulu gan ke jaringan ZTEnya.
      Bisa dilakukan attack ke access point wifi dulu untuk masuk ke jaringanya.

      Delete
  10. Bang kalo cat/userconfig/cfg/db_user_cfg.xml:no5 foubd gimana ?

    ReplyDelete
  11. ane tes di f660 MNC di encrypt filenya. bagaimana cara decryptnya?

    ReplyDelete
    Replies
    1. bisa diupload contoh encrypted filenya? bisa dicopas ke pastebin atau semacamnya :)

      Delete
  12. udah kebuka tapi bagian password ******
    gmn tuh gan?

    ReplyDelete
    Replies
    1. Bisa kirimkan filenya atau screenshot nya ?
      Atau jangan2 memang itu password anda hehe

      Delete
  13. F609
    Login: rooy^Ht
    User name is incorrect
    Login: root
    Password:
    Password is incorrect
    Password:
    Password is incorrect
    Password:

    BusyBox v1.01 (2017.03.11-07:53+0000) Built-in shell (ash)
    Enter 'help' for a list of built-in commands.

    / # cat /userconfig/cfg/db_user_cfg.xml | grep password
    / # sendcmd 1 DB p DevAuthInfo




































































    / #

    ReplyDelete
    Replies
    1. terima kasih, membantu sekali. sepertinya bisa enable koneksi modem 3G dengan ini

      Delete

  14. BusyBox v1.01 (2017.03.11-07:53+0000) Built-in shell (ash)
    Enter 'help' for a list of built-in commands.

    / # cat /userconfig/cfg/db_user_cfg.xml | grep password
    / # sendcmd 1 DB p DevAuthInfo




































































    / #

    ReplyDelete
  15. Gan Please Help masih tidak bisa detect ya apakah ada yg slah ketik kah


    F660
    Login: root
    Password:

    BusyBox v1.01 (2016.07.08-08:21+0000) Built-in shell (ash)
    Enter 'help' for a list of built-in commands.

    / # cat /userconfig/cfg/db_user_cfg.xml | grep UserName
    / # cat / userconfig/cfg/db_user_cfg.xml | grep UserName
    cat: Read Error: Is a directory
    / # cat / userconfig/cfg/db_user_cfg.xml | grep UserName
    cat: Read Error: Is a directory
    / #




    ReplyDelete
  16. Coba cat /userconfig/cfg/db_user_cfg.xml isinya apa?

    ReplyDelete
  17. gan ane coba cat /userconfig/cfg/db_user_cfg.xml isinya encrypted kyknya, cara decrypt nya gmn ya?

    ReplyDelete
    Replies
    1. coba kalau saya boleh lihat bisa dikirimkan ke felangga@gmail.com

      Delete
  18. sudah ane kirim gan ke email, tolong d cek ya gan

    ReplyDelete
  19. gan yg V2.30.20P8T10S cara buka telnetnya bagai mana bisa tolong email ke kutunet@gmail.com gan trims

    ReplyDelete

Post a Comment

Popular posts from this blog

HackRF Mayhem Failed to Update - M0 Guru Meditation Hard

I was on Mayhem Portapack v2.0.1 and want to upgrade to the latest stable release v2.1.0. The update went okay using the web upgrade https://hackrf.app/. But then I saw the latest nightly update and want to try it, since it has many new tools that are not yet included in the stable release. But then the update failed :( Disclaimer: I didn't take any photos of the errors, since I was focused on googling the solution. So the error was " Bad Firmware or Failed W/R error" during the upgrade process, and it was stuck. So I had to restart the device, and it was booting to the Mayhem menu, but on the bottom left, which should show the current firmware version, it was showing a  "FLASH ERR"  message. I think I should go back to the stable release, but I can't. Every time I want to flash the stable release version, the portapack will shows an error M0 Guru Meditation - Hard Fault.  There's an issue that was closed on the Mayhem GIT repo that has the same issue a...

Fiberhome HG6145D2 Superadmin Login

Maybe some of you are using In**ehome ISP as your home internet and found out that using the provided login has minimal options to configure the router: user  user1234 I know it’s not the admin login, and that must be a full-control user account that can be used to control this router fully. So I searched and found some posts on the net and most of them are telling me to use: admin %0|F?H@f!berhO3e I tested it and it doesn’t work! But there’s more to it, you need to reset the router first by pressing the reset button on the side of the router. Then after resetting, you can log in using the admin superaccount! But keep in mind, never use the user log in again, because it will lock the super admin login until you reset the router again. Cheers 🍺

Macintosh Classic II Brightness Issue

The Problem My Macintosh Classic II suffers from an issue where the display CRT goes dim after a few minutes on a cold boot. Every time it happens, I need to crank up the cut-off and brightness  pot behind the machine to show the image. The Analyze At first, I thought it must be the brightness issue, so I searched for the Macintosh Classic analog board schematic to check the brightness line. I found the schematic from Bomarc, and the schematic is suitable with my board, since there are two analog board versions.  I started to suspect the resistors and potentiometer on the brightness line. This Macintosh version has software-controlled brightness, so the analog board will get a 22.25 kHz square wave PBM signal from the logic board to control the brightness. I checked and replaced some resistors and cleaned the potentiometer, but nothing seems to work. The signal is there, and no sign of degradation that makes the screen dim after a few minutes.  Brightness Line So I suspec...