Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

B10B Factory Reset: Difference between revisions

m
Can't count: 8 not 9
m (SHA-512 not 256)
m (Can't count: 8 not 9)
To use the steps below here on this page, you will need to login as the supervisor user. This needs some work, and (in the case of firmware versions AAVF.10 and later) may be quite difficult.
 
The supervisor account uses a password which is automatically generated by the device, and unique to each device. Its format is 98 hexadecimal digits (each digit is 0-9 or a-f), and is believed to use the device's serial number as a starting point. AAISP do not know this password.
The usual way to obtain the supervisor password is to use software (e.g. hashcat) to crack the hashed version of the password which is held in the file /etc/passwd (before firmware version AAVF.10) or /etc/shadow (version AAVF.10 and later). The earlier firmware versions used an MD5 hash, and hashcat (on a fast machine) could crack the password in around 8 minutes. AAVF.10 switched to SHA-512 and hashcat takes longer to crack the password.
 
 
If you manage to crack the supervisor password, you can login to the CLI as root with this password and get a root shell - enabling you to run commands such as ''iptables'' and ''ip6tables''.
 
==Reset to the ZyXEL Factory Settings==
 
editor
466

edits