Bypassing "pirelli Drg A223G" User Access Lock To Obtain Administrator Access

New user? Register Now!

Help

Security calendar

Chat

Subscribe to sykadul's Blog

15 October 2009

Leave Comment

Posted by sykadul

Bypassing "PIRELLI DRG A223G" user access lock to obtain administrator access
Written by sykadul for www.astalavista.com on 28-03-2009

Today I bought a "PIRELLI DRG A223G", decent price, decent range, fairly good for what I was looking to achieve, it was also my ISP's choice of router to bundle with any new subscription packs.

The problem: This router comes with a default "user/user" combination as username and password fields, however the access seemed far too restricted and there seemed to be no way to change the password for the "user".

The objective: Full administrator access.

The method:
After poking the router's configuration panel, there was a way of backing up the config file and then reloading it via an upload form! Sounds like the first place one would look to achieve the desired changes and in fact that's what I did.

After backing up the configuration file via "Advanced > Configuration file > Backup configuration file" and opening it with a text editor I located the following set of lines:

(admin
(user
(0
(username(susapo))
(password(*****))
(full_name(Administrator))
(email())
(permissions
(lan_acc(1))
(wan_acc(1))
(mgt(1))
(fs(1))
(clients(1))
)
(notify_level
(0(15))
(1(15))
)
)
(1
(password(&cb;gT&c2;))
(full_name(User))
(username(user))
(group(0))
(permissions
(lan_acc(1))
(wan_acc(1))
(mgt(1))
(fs(1))
(clients(1))
)
(8021x_port_auth(none))
(email())
(notify_level
(0(15))
(1(15))
)
)
)

The trick was simply to change the (password(*****)) with (password(&cb;gT&c2;)) since the latter was the previously known "user" password.

After reuploading the file via "Advanced > Configuration file > Load configuration file" I was able to login using the "susapo" and password "user", having administrator access allows for far more access including user management amongst others.

Share This Entry: