|
|
发表于 2018-11-14 16:40:59
|山西|
显示全部楼层
可以确认GM219-S 硬件版本：HV1.0.00.052 为四川天邑代工的。。。找到了地区配置文件。。。找到了各种服务的默认的密码：3 C0 [* O& w: v
" ~$ u9 a% e) M
<Account> }+ W/ S" k. P8 O
<Entry0 Active="Yes" username="CMCCAdmin" web_passwd="aDm8H%MdA" display_mask="FF FF FF FF FF FF FF FF FF" />$ {* j0 E5 D0 {
<Entry1 Active="Yes" username="user" web_passwd="1234" display_mask="BF 00 0F 08 07 20 03 00 01" />
: I1 Y& H0 X4 c, |' K! o% I& }1 R <Entry2 Active="Yes" username="user3" web_passwd="1234" display_mask="BF 00 07 08 07 10 03 00 01" />
) }: f5 Q; l* e: z1 g& {2 ~2 t <TelnetEntry Active="No" telnet_username="admin" telnet_passwd="1234" telnet_port="23" />7 V" [( ]( ^3 [- h% S+ N3 d5 C* b
<FtpEntry Active="No" ftp_username="admin" ftp_passwd="1234" ftp_port="21" />
. i& J0 k7 p0 J <HttpEntry Active="Yes" http_right="1" />
. @" _2 W4 g/ E" m C+ U <ConsoleEntry Active="Yes" console_username="admin" console_passwd="1234" />3 O6 u' W2 l0 d; l \# O! D
<CTDefParaEntry setDefValueFlag="1" />
`; g7 A. l: b7 E U</Account>
, c; L/ I4 y& F7 d
尝试固件里/boaroot/cgi-bin/目录下的一些页面。。。发现了一些web下的隐藏页面。。。相同硬件版本的可以去尝试：/ A- n! |+ v8 b6 U6 z
b. z8 j" `4 i' b2 Uhttp://192.168.1.1/cqregister.asp; s+ L2 M" `6 s: J
http://192.168.1.1/cqreset.asp
2 r. r9 J" C! k9 I& Bhttp://192.168.1.1/cwmpsetting.asp+ m h6 N p; X
http://192.168.1.1/getGateWay.cgi+ L3 Y3 i! n0 |+ @9 C/ I
2 O8 U, ]: h1 Z# E6 ~, ~#getRomfileInfo就出现个下拉菜单
2 W9 V2 c- b3 q. n& l( phttp://192.168.1.1/getRomfileInfo.cgi
3 ]* N0 `4 A& P6 z: |1 p7 g7 P# D& I9 }$ F6 s
http://192.168.1.1/register.asp
! D; n @! Y2 A: z0 @5 l) G) Ohttp://192.168.1.1/regprocess.asp
6 X8 C* T+ z( ~7 S: d4 rhttp://192.168.1.1/regprocess.cgi7 {8 k1 C/ t: S+ `& T3 C9 P1 L
( w& |2 C, c: M4 @/ H# p' N/ B#恢复默认设置的命令不会丢移动下发的配置
8 t8 o5 U: k6 @( T7 I1 [http://192.168.1.1/restorepurefactory.cgi
1 Z5 m j3 |1 N+ g
' T3 v# v! b: z3 Q3 r* N/ b, [* Y- Qhttp://192.168.1.1/telnet.asp
) ]. B- s8 v; G& T0 G$ Thttp://192.168.1.1/test_factory.asp% U& a+ I% h* k6 J6 Z0 T: n2 X
http://192.168.1.1/test_info.asp5 ^4 _4 O$ e+ C7 B1 ?0 u
http://192.168.1.1/test_version.asp8 o; ~' \+ f7 w9 g
http://192.168.1.1/upgrade.asp
7 K2 A( A1 t) ^ w2 N9 P0 q, f! o2 C. T" t" L4 E8 Y
/boaroot/cgi-bin/目录下的所有文件。。。其他隐藏页面有兴趣自己去尝试。。。
% e# ?, n! o; bapp-daily.asp
& ~- l) I/ |- r; ]- _4 z# b japp-ddns.asp
! U. {, m2 N& k* Y7 |+ `app-igmpset.asp9 o2 t/ Y# n: K/ I3 Z2 K
app-natset.asp% M: D4 }) g: e' u: G. ]
app-upnp.asp
G4 n5 ?6 E. n3 vapp-VoIP.asp1 \5 O% d, q7 `2 c
app-VoIP248.asp
' F$ h' O1 S; c: W9 Q$ w! capp-VoIP248_Adv.asp" ]* J% E' y m% q! j$ Y
app-VoIPUser.asp
5 o) m" k" a) S! \3 K: X4 eapp-VoIP_Adv.asp
2 u" j }- m5 B: `' Y5 Fapp_ddnslist.cgi. b% N. `* @( s8 i! C/ g0 D
avalanch.asp3 j# c: t) @/ l" }+ B7 n3 P! w# z0 |7 q
byeBye.cgi
/ E; M* k" H1 g1 d5 qadv_vpn.asp( s$ o/ F3 Z' Z* g/ o& v+ ~
cqregister.asp
+ K5 r# ^! [ }/ j5 v% h7 r- I6 Zcqreset.asp+ k) `: o. M$ z" X8 H
adv_upnp.asp6 R: ^" P- x; M$ @" ^1 e j
cwmpsetting.asp
% O. J/ A% P$ {# o: j& qdiag-quickdiagnose.asp
, @; W, ?- a! n( v ]% ]ErrMsg.asp
: z' V+ G# C1 o* Z& e7 jgetGateWay.cgi8 q: d2 w* y! y- K# ~8 J2 E* t M
getPingResult.cgi
" n6 c* _4 t6 x& VgetRomfileInfo.cgi5 y* S- y9 V. }9 m. l
getTracentResult.cgi" l* h- R& z ^7 e+ i8 I' g9 h
help.asp# ^% M7 f+ {3 h7 v
help_content.asp5 Y8 H( p0 W: l$ k/ A J4 v
adv_qos.asp
' e8 z+ i3 K; {" sadv_dmz.asp3 o% P( k- N# E
index.asp
6 c7 _3 ~* c9 P1 D( {% t0 Xindex2.asp
' g% s9 x3 S& L! ?' x; |8 zindex3.asp* y4 g W, c' j, P6 [
InsertSimcardMsg.cgi+ [8 i! J. p( j* r, `: j
itms.cgi) M9 G A5 \: Q
adv_ddns.asp
2 T1 M2 _9 @: O; w2 @# Ccontent.asp2 `. M% w* l( I$ T0 Y P
laserforce.cgi
7 J* Q( B" ~/ z; nlasernormal.cgi+ K, u6 O7 x" p9 E" R
logout.cgi
. b' V1 `" a1 C+ E: z$ Y6 }mag-account.asp; K) T: }. L1 }2 d$ l9 E. M2 A: U
mag-diagnose.asp
0 {' l2 q6 b0 cmag-reset.asp1 m$ ]- e. P# h( _( {* [
mag-syslogmanage.asp
5 I: u v7 i9 i, h, Tmaintainreport.cgi0 g3 @7 p0 I3 K+ O: e
net-binding.asp
3 S9 g4 g* q o; Z. z- @net-dhcp.asp
9 B4 o( m1 S9 C' Snet-landingpage.asp
) c( O; @1 B0 F, `net-phoneapp.asp! r( m8 M/ x7 k! C5 Y& ]$ F' G! z
net-qos.asp
z4 o& R1 |" w5 V9 Snet-route6add.asp
8 f5 ~+ |1 t4 u8 r* K/ Bnet-routeadd.asp
7 s( A3 C8 o5 s7 C s& d& \net-routeset.asp* A: l' j t/ N) e; ?
net-time.asp
3 h- t7 k1 q5 K& c9 P- nnet-tr069.asp, u: z% q% a9 Q: b# V# L
net-wanset.asp
/ W- K4 ]9 J/ D# E! m) Hnet-wlan.asp8 E% V1 d+ z" E8 _3 I+ r" c" w4 \6 G
net-wlan11ac.asp4 F4 y; _. V5 W) R- N* a
net-wlanshare.asp/ j4 z3 @! z6 g% q- V+ d, B
normal_access.asp
0 ~1 T: L# ?7 t; G/ }normal_internet_wan.asp
J! P* H1 G T$ Vnormal_manage.asp/ J4 ~! M$ y* Q
normal_manage_password.asp
7 L; V" f% v; v5 q% C4 c2 rnormal_network.asp$ ]. ^- G* G+ E; Y
normal_security.asp/ c- S- u" }$ c
normal_sys.asp
2 L8 R2 Q- T9 x! ?% f! [' M$ u4 B1 cparentControl.asp& ~$ a; C& M2 `( S$ [
pushviewfinish.asp) L. [6 d9 o( t5 e ]
pushviewupgrade.asp) i( ^9 k6 M/ T
qos-clsedit.asp6 J) h* @$ }. B1 n! I* D
qos-comvlan.asp
, V9 ?" t5 q0 k* v0 u+ y: oqos-dslimit.asp1 d% s# `1 S. i# p3 o2 a/ b
redirect.cgi( _ k" ~6 O& [" f( m! K% d+ }1 i+ {
redirect_cancel.cgi
, W* F. H' Z* @0 w4 c8 L8 {refresh.asp0 V, k; _: J& F& v4 h
register.asp( y- i( \+ p Q3 ~; z4 m. {8 N5 }
regprocess.asp
6 X, j5 X4 _) J4 mregprocess.cgi8 e& `" ~ Q$ p; K# i
regstatus.asp
" F/ B' ~0 ^" C& G$ L1 ORemoteUPGMsg.cgi9 G, \% K3 y: Q* e
reset.asp3 }/ z* p& _4 _5 ~
resetscreen.asp
& o) W3 S& V' @$ w5 x! U* W- U% n! Urestorepurefactory.cgi8 L9 e: _) s* f$ K6 n9 G& H
sec-addmacfilter.asp' M( n& q: E! u) M
sec-addportfilter.asp, }7 X' Y7 F+ I) `9 q8 [) m
sec-firewall.asp( f1 f: d; `* q6 o
sec-macfilter.asp& ]* r/ z, x+ H6 Y4 m
sec-portfilter.asp
/ Q, e# C! E: M2 wsec-protocolfilter.asp
* i3 ]5 K5 K5 e4 jsec-urlfilter.asp
3 W0 v/ b6 E( m9 ]" o B2 P, Hsec_macfilterlist.cgi
( ]/ G2 n5 a5 L8 w ^9 Esec_portfilterinlist.cgi
/ B( W0 R. q* msec_portfilteroutlist.cgi
* ]: Q$ o0 |6 z9 \" C+ Gsec_urlfilterlist.cgi4 |3 I; |0 f9 _" x" A- u2 H4 {
selfcheck.asp
0 f9 {4 N G& Z6 e: I1 Fshowhis.cgi
I. P. ^' p% D1 X5 S$ L! ~showusb.cgi8 r9 \" D2 `4 G1 v) a& U
sta-acs.asp
5 U& p& u M3 s; o G* r9 Dsta-device.asp4 [& b" c, x% R5 F
sta-network.asp7 }% i) @5 _+ R7 N5 v
sta-position.asp L2 t S0 m: [5 E5 U! {0 K
sta-user.asp
! K. x( z' l9 J# Csta-VoIP.asp: I* ~4 U5 ^2 w
sta-VoIP248.asp7 j, g$ B# Z; ^) v7 O% k
state_bandwidth.asp
' O; x) v2 Z( }' _3 tstate_device.asp
% ]! T, [/ f" U# m) D! K! rstate_gateway.asp
3 r; u& \; H: \: I% H( v2 wstate_overview.asp9 {2 ?9 `7 Q# X; P" v
store.asp, ?5 Y. X; ~8 `& Q/ _
syslog.cgi
# Y; Q/ A+ N+ |7 J+ ?8 mtelnet.asp
1 U6 Q) E5 E8 p0 L( F2 ntest_factory.asp
7 l& X. |, ^. S+ t$ Itest_info.asp/ B$ ` k5 \0 o" G7 P
test_version.asp- Y/ ~( N R3 i* ?" y
uindex.asp% G, z2 o9 _3 y$ }, }3 r
UpdateMsg.cgi# O% |9 j+ p. e
upgrade.asp
8 C; Y" C& b; ]wifi.asp
6 S4 h( {8 E7 G4 u由于没拿到telnet账户密码。。。也就到此为止了。。。期待有大神出现。。。
! I5 V0 h( U4 y: M$ k
, B* C% [2 [. b% b
5 Q5 b6 K9 @( i6 D9 g3 {# U" s
) C5 i/ Y$ S0 J6 v |
|
/1 
44152102000001
