3

I switched to new ISP yesterday, they gave me a D-Link router, can't use my old router. I want to change the wireless password, went to 192.168.1.1, I can login with the the username and password user user, but not as admin.

On the catalog it says that the default username and password are admin admin, tried that didn't work. Tried admin and no pass, tried many combinations, none worked.

I asked some other users and they said that the isp is blocking the users from logging in as admins, and blocking the reset button, and said that there's a hack where you do something like:

cmd> telnet "router ip" and do something like dumpcfg

Could you please give a better explanation on how to gain admin privileges on your own router if your isp is not letting you do so by default?

For what it's worth, I live in Lebanon and my ISP is Ogero.

Improve this question
16
  • What model is the router?
    – sgtbeano
    Nov 4, 2013 at 9:19
  • @sgtbeano DSL-2640U
    – Lynob
    Nov 4, 2013 at 9:24
  • Thanks, whilst I take a look - have you asked your ISP for admin access?
    – sgtbeano
    Nov 4, 2013 at 9:30
  • 1
    There shouldn't be a reason you cannot purchase your own ADSL modem and change the MAC Address to match the modem you have. From a technical perspective your ISP wouldn't be able to tel the difference. I assume you are in some other country that isn't the US?
    – Ramhound
    Nov 4, 2013 at 12:18
  • 1
    @Rudolph thank you all guys for trying to help
    – Lynob
    Nov 5, 2013 at 16:25

1 Answer 1

Reset to default
8

I managed to crack the password, I'll post the answer as a future reference to future users if you don't mind.

  • Use Telnet (enable it if you're on windows) and connect your laptop to the router using a cable.

  • Open a terminal or command prompt and type telnet 192.168.1.1 or whatever your local IP is. my username and password are user and user they are usually the default username and password for non admin users.

  • type dumpcfg and copy the output to a text file.

  • the output is almost full of crap, so i'm not going to paste it, you're only interested, in two lines, the first is sysUserName value="" and the second is sysPassword value="" usually, it's sysUserName value="admin" and as for the password it's sysPassword value="Base64EncodedString"

  • Go to a Base64 decoder, copy the encoded password string, and click bas64 to normal string. In my case, the encoded password was <sysPassword value="bXkxMTAxMTM="/> i decoded it, so my password was my110113.

I only tried that on D-Link router, I don't know about other routers, but as long as they use Base64, I see no reason why it shouldn't work, and it's not hacking, it's gaining administrative privileges on your own router.

Improve this answer
9
  • So what was the password? There is no security threat in sharing this information since we cannot actually connect to your router.
    – Ramhound
    Nov 5, 2013 at 16:32
  • @Ramhound the encrypted password was <sysPassword value="bXkxMTAxMTM="/> i decrypted it, so my password was my110113
    – Lynob
    Nov 5, 2013 at 16:43
  • 2
    Interesting. You might update your question and name who your ISP was. I suspect many people might have the same password if they are in a similar position it might help them.
    – Ramhound
    Nov 5, 2013 at 16:48
  • @Ramhound good point, done
    – Lynob
    Nov 5, 2013 at 17:04
  • 1
    @Fischer Quick FYI, it's generally a good practice on this site to mark the answer as "answered", even if you answered your own question (what a mouthful!) There should be an outline of a check mark next to the answer that you posted. If you click that check mark, it'll turn green.
    – Sawta
    Nov 5, 2013 at 17:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .