eeeck/zyxel-vmg8825_b50b-emulator
1
0
Fork 0
Code Activity

Translate to English

Browse Source
This commit is contained in:
Erick
2026-04-20 11:24:29 +02:00
parent a4f0a1a9de
commit 2c17427272
1 changed files with 172 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+172 -171
View File
@@ -1,171 +1,172 @@
#################################################################################### Contenuto archivio # Archive Contents
Nell'archivio troverete i seguenti file The archive contains the following files:
Leggimi.txt - Questo file - `README.md` - This file
- `zyxel-qemu.bat` - QEMU execution batch file
zyxel-qemu.bat - batch esecuzione QEMU - `qemu` - QEMU configuration file
qemu - file configurazione QEMU - `rootfs.ext2` - Contains the router's filesystem
rootfs.ext2 - contiene il filesystem del router - `zImage` - Linux kernel
zImage - kernel di Linux - `vexpress-v2p-ca9.dtb` - Required for ARM architecture and Linux
vexpress-v2p-ca9.dtb - serve nell'architettura ARM e Linux. - `genpass` - Linux script for parameter management
genpass - script Linux per la gestione dei parametri > **Note:** The `genpass` file is not meant to be used as a file but was included only for studying the Linux script.
Nota: il file 'genpass' non serve come file ma è stato inserito solo come studio dello script Linux Using the emulator requires QEMU to be installed.
L'uso dell'emulatore richiede obbligatoriamente l'installazione di QEMU. ---
# Installing QEMU
#################################################################################### Installazione QEMU in Windows
## On Windows
Scaricate la versione più recente dal sito
Download the latest version from:
https://qemu.weilnetz.de/w32/ - Applicazione per Windows a 32bit (funziona anche su Windows a 64bit)
https://qemu.weilnetz.de/w64/ - Applicazione per Windows a 64bit - [32-bit version](https://qemu.weilnetz.de/w32/) – Works on 64-bit Windows as well
- [64-bit version](https://qemu.weilnetz.de/w64/)
Installate l'applicazione.
Then install the application.
- Installazione QEMU in Linux (Ubuntu/Debian) ## On Linux (Ubuntu/Debian)
sudo apt-get install qemu-system-arm Run the following command:
```bash
#################################################################################### Uso emulatore Zyxel sudo apt-get install qemu-system-arm
```
Scaricate l'archivio dell'emulatore.
---
Decomprimete l'archivio in una cartella.
# Using the Zyxel Emulator
In Windows lanciate il batch 'zyxel-qemu.bat'
1. Download the emulator archive.
2. Extract the archive into a folder.
#################################################################################### Info pacchetto emulatore 3. On Windows, run the batch file `zyxel-qemu.bat`.
Nelle cartelle ---
/opt/zyxel # Emulator Package Information
ci sono le librerie estratte dal firmware distribuito dalla Zyxel - **`/opt/zyxel`** – Contains libraries extracted from the firmware distributed by Zyxel.
- **`/opt/genpass/`** – Contains the `libhook.so` library, which compensates for the lack of router flash memory. It allows the serial number to be read from an environment variable instead of from flash.
/opt/genpass/
- **`getpassword`** – A binary that calls functions inside Zyxel's libraries to calculate the password and prints it to the screen.
c'è la libreria libhook.so che serve per sopperire alla mancanza della flash del router in modo che il seriale invece che leggerlo sulla flash lo legge da una variabile d'ambiente - **`genpass`** – A script that ties everything together.
Il file ---
getpassword # Modifying the `rootfs.ext2` File
è il binario che chiama le funzioni dentro le librerie della Zyxel per fargli calcolare la password ed una volta prese le stampa a schermo. To mount and modify the `rootfs.ext2` image file, you need a Linux system with ext2/ext3 utilities.
Mentre lo script
## Steps
genpass
1. **Create a mount point:**
è quello che mette insieme il tutto. ```bash
sudo mkdir /mnt/rootfs
```
#################################################################################### Modifiche al file rootfs.ext
2. **Mount the filesystem:**
Per montare il file immagine rootfs.exet2 in modifica serve un Linux e le utility relative alla gestione ext2/ext3. ```bash
sudo mount -t ext2 rootfs.ext2 /mnt/rootfs
I comandi da dare sono ```
The `genpass` file is located at `/mnt/rootfs/opt/genpass/`.
- Creazione cartella espansione file contenuti in rootfs.ext
3. **Make your changes** (e.g., copy a new `genpass` file).
sudo mkdir /mnt/rootfs
4. **Unmount the filesystem:**
- Montaggio file system rootfs.ext ```bash
sudo umount /mnt/rootfs
sudo mount -t ext2 root.ext2 /mnt/rootfs ```
il file 'genpass' è nel percorso '/mnt/rootfs/opt/genpass/' 5. **Remove the mount point (optional):**
```bash
Si fanno le modifiche del caso es. copia nuovo file genpass) sudo rm -rf /mnt/rootfs
```
Finite le modifiche si salva il nuovo file rootfs.ext dando il comando
---
sudo umount /mnt/rootfs
# Serial Number Format
e si possono rimuovere i file in /mnt/rootfs
The modem's serial number consists of:
sudo rm -rf /mnt/rootfs
| Part | Description | Example |
|------|------------------------------------|---------|
#################################################################################### Info sul numero seriale | 1 | Letter `S` | `S` |
| 2 | Three digits | `182` |
Il seriale del modem è composto | 3 | One uppercase letter | `V` |
| 4 | Eight digits | `12345678` |
da una prima lettera S
**Full example:** `S182V12345678`
da un seconda parte costituita da tre cifre
---
da una terza parte rappresentata da una lettera maiuscola
# Using the Zyxel Emulator
da una quarta parte numerica di 8 cifre
Once the system has booted, you will see the classic Unix/Linux console:
#################################################################################### Uso emulatore Zyxel ```
root@VMG8825-B50B-emul login:
Una volta che il sistema è avviato vi troverete davanti la classica console Unix/Linux. ```
root@VMG8825-B50B-emul login: ## Login credentials
Potete entrare inserendo - **Username:** `root`
- **Password:** `root`
user = root
password = root > You can also use SSH access on port `2222`. QEMU (launched via the batch file) listens on port 2222 and forwards connections to port 22 of the emulated router.
Volendo potete usare anche l'accesso via SSH sulla porta 2222. ## Generating passwords
In pratica qemu-system-arm (lanciato tramite il batch) si mette in ascolto sulla porta 2222 e ridirige la connessione sulla porta 22 del router emulato.
After logging in, run the following command from any directory:
Una volta avuto accesso senza dover cambiare cartella basta dare il comando
```bash
genpass SerialeModem genpass <SerialNumber>
```
dove
Replace `<SerialNumber>` with the modem's serial number (e.g., `S182V12345678`).
SerialeModem è il seriale del modem (es. S182V12345678)
### Example output
La risposta al comando genpass sarà del tipo ```
Old algorithm supervisor password: cdef644b
Old algorithm supervisor password: cdef644b New algorithm supervisor password: 7QrscaaYya
New algorithm supervisor password: 7QrscaaYya
Old algorithm admin password param 1: WJNCRMTT
Old algorithm admin password param 1: WJNCRMTT Old algorithm admin password param 2: K9KydTzT
Old algorithm admin password param 2: K9KydTzT Old algorithm admin password param 3: S9KcdTeT
Old algorithm admin password param 3: S9KcdTeT
New algorithm admin password param 1: WJNCRMTT
New algorithm admin password param 1: WJNCRMTT New algorithm admin password param 2: K9KydTzT
New algorithm admin password param 2: K9KydTzT
New algorithm admin wind password param 2: K9KydTzT73
New algorithm admin wind password param 2: K9KydTzT73 New algorithm admin wind password param 1: WJNCRMTTQ3
New algorithm admin wind password param 1: WJNCRMTTQ3
Old algorithm admin wind password param 2: K9KydTzT73
Old algorithm admin wind password param 2: K9KydTzT73 Old algorithm admin wind password param 1: WJNCRMTTQ3
Old algorithm admin wind password param 1: WJNCRMTTQ3 Old algorithm admin wind password param 3:
Old algorithm admin wind password param 3:
Wifi password param 2 e 1: MPPGPCJ444MXGU34
Wifi password param 2 e 1: MPPGPCJ444MXGU34 Wifi password param 0: C9D4CB2BADE5618AD92BEC2AC7
Wifi password param 0: C9D4CB2BADE5618AD92BEC2AC7 Wifi password param 1: CFC9887CA2
Wifi password param 1: CFC9887CA2 Wifi password param 2 e 0: SPP6WCJ444SX6U34
Wifi password param 2 e 0: SPP6WCJ444SX6U34 Wifi password param 2 e 2: 8PPXWCJ4448XXU34
Wifi password param 2 e 2: 8PPXWCJ4448XXU34 Wifi password param 2 e 3: apprwcjpppaxrunp
Wifi password param 2 e 3: apprwcjpppaxrunp Wifi password param 2 e 4: SPP6WCJ444SX6U34
Wifi password param 2 e 4: SPP6WCJ444SX6U34 Wifi password param 2 e 5: hPPNWCJ444hXNU34
Wifi password param 2 e 5: hPPNWCJ444hXNU34 ```
---
#################################################################################### Uscita dall'emulazione
# Exiting the Emulator
Una volta effettuato il login per uscire digitare
1. After logging in, type:
root@VMG8825-B50B-emul:~# exit ```bash
exit
quando appare ```
VMG8825-B50B-emul login: 2. When the login prompt appears again:
```
chiudere la finestra DOS aperta VMG8825-B50B-emul login:
```
close the DOS window.