贝尔 G-140W-TG telnet root用户密码是多少啊

daljay

贝尔 G-140W-TG telnet root用户密码是多少啊，如题，求大神指点
! X0 _; g5 T& z

bg5bbl

WmQbYWZ8nfh4

daljay

<SuPassword ml="64" rw="RW" t="string" v="dd5SPAyMLr3ZbCsX/B/5Vw==" ealgo="ab"></SuPassword>
! m3 a1 f9 K+ `2 a) I2 e

liufubiao2015

帐号root   密码 LA(ImvZx%8

daljay

daljay 发表于 2023-7-5 16:30

对了 哈哈哈。谢谢大佬，另外贴出相应解密python代码
; J+ q- M5 Q' g+ M3 u  P- u: C
6 Q+ {; ^* g. }) x' |#!/usr/bin/env python3



* Q% f" I( h- s8 R. P) [import sys
. b2 j2 ~, S* [5 pimport zlib
: g" T) T) k! }2 n# H/ \  Nimport struct
import base64
import binascii
import datetime
  e& d/ Q" D! Y+ @4 K' s4 ffrom Crypto.Cipher import AES
! ?* g$ s  f: y& s

class RouterCrypto:

    def __init__(self):
        key = '3D A3 73 D7 DC 82 2E 2A 47 0D EC 37 89 6E 80 D7 2C 49 B3 16 29 DD C9 97 35 4B 84 03 91 77 9E A4'
% a. d  h5 g* i0 w. e* ]        iv = 'D0 E6 DC CD A7 4A 00 DF 76 0F C0 85 11 CB 05 EA'
        self.cipher = AES.new(bytes(bytearray.fromhex(key)), AES.MODE_CBC, bytes(bytearray.fromhex(iv)))

# r5 Y- {4 y5 n" S1 f    # create AES-128-CBC cipher

( g: y! j5 O0 _) m5 v$ S    def decrypt(self, data):
        output = self.cipher.decrypt(data)
        return output[:-ord(output[-1:])]
( O: O# z2 f1 e5 j' ]- p
    def encrypt(self, data):
        pad_num = (16 - (len(data) % 16))
5 o( H5 c! D) O7 o        data += chr(pad_num).encode() * pad_num
        return self.cipher.encrypt(data)
2 R8 ~3 N' e, i- n1 K2 w$ o

if __name__ == '__main__':
4 w7 l  O, j# H/ {2 I0 B    decrypt_mode = sys.argv[1] == '-d'
    if decrypt_mode:
# s/ R& o4 E: \  z        print('\ndecrypted: ' + RouterCrypto().decrypt(base64.b64decode(sys.argv[2])).decode('UTF-8') + '\n')
" H- C1 E7 O$ D0 c$ R
! C) D7 K- I: h  K+ J  y    else:
( Q& H) t' P% j. Z' M0 R- ?+ U
* o: |0 W+ E8 {        print('\nencrypted: ' +base64.b64encode(RouterCrypto().encrypt(sys.argv[2].encode())).decode('UTF-8') + '\n')