Password for Telnetd on RC8221 (Home by SFR)

[Jezza34000]

Hello,
Someone have the password for root account in telnetd ?
The one who is provided in this repo is not working on this model...
Thank YOU

[edent]

There's a guide which shows how the password was discovered at https://shkspr.mobi/blog/2017/11/telnet-and-root-on-the-sercomm-icamera2/

It might also work with your model.

[Jezza34000]

Hi Edent !
Thank you for you fast answer. And thank you for your repo, with this one i could have done a plugin for jeedom (french domotique system) it was so helpful ! 👍
About your link, i already read those post, i use Ghidra to reverse engineering the rc.sethost file coming from my dumped firmware.

But i'm stuck, i got those code :

I'm not able to find what it could write inside the passwd file

[Jezza34000]

OK i got it.
I found the way to avoid DES hash, i patch it and i got :

Password : Aq2!0025

But dosent work :-(

[edent]

Which username did you use? Might be worth trying a few different one, root, admin, Administrator etc.

[Jezza34000]

I have tried everything.
The only one who is accepted is the admin one but i got a message :

CGI Error!
403 Forbidden

I think it's not available on that model...