武汉电信中兴F450 V4.0光猫的超级密码有没有人破解了的

noki***

开盖了，串口打到启动系统就不打印了。

1. Boot SPI NAND
   
2. start read bootheader
   
3. start read secondboot
   
4. secure boot
   
5. CBC decrypt OK!
   
6. CBC decrypt OK!
   
7. verify OK!
   
8. Jump
   
9. rate is 1066M
   
10. value = 0x12
    
11. 7smux:3f7ffffa:3ffffeff:19ff0555:6be1b
    
12. 7s vid 67
    
13. vid is 67
    
14. ddr size 10000000
    
15. two plane
    
16. secure uboot
    
17. verify OK!
    
18. backup header!!
    
19. Jump
    
20. 
    
21. 
    
22. U-Boot 2013.04 (Oct 25 2020 - 20:57:17)
    
23. 
    
24. CPU  : ZX279127S@A9,1000MHZ
    
25. Board: ZXIC zx279127sevb
    
26. 127s product_vid = 67
    
27. DRAM:  256 MiB
    
28. 127s product_vid = 67
    
29. ,10000000,50000000
    
30. cpuid=27912710
    
31. 127s pinmux: 177770c0  3dd7  3fffc555  11ef7f
    
32. 127s product_vid = 67
    
33. mtk reset,66,53
    
34. bootsel=3
    
35. NAND:  
    
36. Manu ID: 0x2c, Chip ID: 0x24 (Micron SPI NAND MT29F2G01ABAGDWB  256MiB 3,3V)
    
37. 256 MiB
    
38. <nand_read_skip_bad_,422>!mtdpart=0x1,offset=0x0,mtdpartoffset=0x180000,mtdPartsize=0x80000,length=0x20000
    
39. In:    serial
    
40. Out:   serial
    
41. Err:   serial
    
42. clk_pll env is not setted, core clk won't change
    
43. Net:   enter ref_clk_set.. mode = 0 .
    
44. enter pll_cfg_fractional
    
45. ref_clk_set success!
    
46. gpon serdes init
    
47. addr 0x9400002c before value is 11000013
    
48. addr 0x9400004c after value is 11003ff3
    
49. eth0
    
50. sec mode!
    
51. 
    
52. Hit 1 to upgrade software version
    
53. Hit any key to stop autoboot:  0
    
54. addr=3600000
    
55. addr=5c00000
    
56. select=0x0
    
57. search=0x2
    
58. <nand_read_skip_bad_,422>!mtdpart=0x6,offset=0x0,mtdpartoffset=0x200000,mtdPartsize=0x200000,length=0x1000
    
59. tmp=0x00000000, value=0
    
60. select=0x0
    
61. search=0x2
    
62. search->result[0].entry=3600240
    
63. <nand_read_skip_bad_,422>!mtdpart=0x2,offset=0x0,mtdpartoffset=0x3600000,mtdPartsize=0x2600000,length=0x1c80000
    
64. RSA Verify OK
    
65. 
    
66. ---mtdparts_init--current_mtd_partnum=0-
    
67. dev id: type = 2, num = 0, size = 0xffffffff, mtd_id = single part
    
68. part  : name = rootfs0, size = 0x01c60000, offset = 0x03620000
    
69. part  : name = rootfs1, size = 0x01c60000, offset = 0x05c20000
    
70. 
    
71. --- jffs2_part_info: partition number 0 for device nand0 (single part)
    
72. jffs2_part_info:rootfs0,3620000
    
73. ### JFFS2 loading '0uImage' to 0x44000000
    
74. Scanning JFFS2 FS: ................. done.
    
75. ### JFFS2 load complete: 2757087 bytes loaded to 0x44000000
    
76. <nand_read_skip_bad_,422>!mtdpart=0x0,offset=0x0,mtdpartoffset=0x0,mtdPartsize=0x180000,length=0x80000
    
77. lseek=0x42077800
    
78. cmdline=U-Boot V3.0.0P1N5 20201025212423
    
79. output gpio:56, value=1, 0
    
80. output gpio:57, value=1, 0
    
81. output gpio:58, value=1, 0
    
82. output gpio:59, value=1, 0
    
83. ## Booting kernel from Legacy Image at 44000000 ...
    
84.    Image Name:   Linux Kernel Image
    
85.    Image Type:   ARM Linux Kernel Image (uncompressed)
    
86.    Data Size:    2757023 Bytes = 2.6 MiB
    
87.    Load Address: 40008000
    
88.    Entry Point:  40008000
    
89.    Verifying Checksum ... OK
    
90.    Loading Kernel Image ... OK
    
91. OK
    
92. ----------------------
    
93. |-->setup versioninfo tag...
    
94. 
    
95. Starting kernel ...
    
96. 
    
97. Uncompressing Linux... done, booting the kernel.

复制代码

hhx***

闲鱼20大洋可以解决，再一个，中兴f450A可以直接进入8080端口，路转桥模式，超级密码都不需要

mayi***

F450 4.0拆机上TTL都没用了。闲鱼可以远程破解。如果是武汉的话可以直接查询。

noki***

淘宝搞定了

su***

nokia007 发表于 2021-8-21 22:19
淘宝搞定了

淘宝上会给超密么？

noki***

sunlu 发表于 2021-8-23 11:15
淘宝上会给超密么？

10元给。就是查个数据库。咸鱼居然有人报价50.。

clim***

请问知道的大神，这个ZX279127S是单核还是双核？

david6***

climb2014 发表于 2022-1-9 17:40
请问知道的大神，这个ZX279127S是单核还是双核？

单核的，1G

156***

用工具打开telnet，直接进数据库不就好了。。

李***

问安装宽带的，他知道

mast***

直接加运维微信问，两句话的事情，其中第一句是 你好。