OpenWrt Forum Archive

Topic: Edimax AR-7084gA DebugMode password

The content of this topic has been archived on 3 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
tplink10
20 Nov 2011, 12:49

Hi. I need password for Debug Mode. I try this and this but it not working - generated pass is wrong.
I try this:

a = first 3 bytes of seed value
b = a + 0x10F0A563 (0x significa hexadecimal)
c = (last byte of seed value) AND 7
password = (b ROR c) XOR a

but i not understand that is 10F0A563 ? How to make a dump and how to find this value using this

I know that I need to do dump all RAM with ATDU and disassemble them using arm-objdump from this tools
How use ATDUx,y (i need x and y)

(Last edited by tplink10 on 20 Nov 2011, 13:12)

Post #2
MBS
20 Nov 2011, 19:30

10F0A563 seems to be the secret hash key of that bootloader. Don't question it, just see if it works for you. Although I don't really see the relation to openwrt (8mb ram/2mb flash are not really enough to work with).

The discussion might have continued from here.