Thread Rating:
  • 4 Vote(s) - 4 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Arris TG2492 (VM Super hub 3)
blacklisted Offline
Haxorware Enthusiast
***

Posts: 27
Threads: 0
Joined: Oct 2018
Reputation: 0
#11
RE: Arris TG2492 (VM Super hub 3)
@emantec

did you do chip off read? With what device you dump nand?

encrypted nand did you verifY read that it was not corrupt?
07-11-2018, 05:20 PM
Find Reply
vmu19 Offline
Junior Member
**

Posts: 6
Threads: 0
Joined: Jan 2019
Reputation: 0
#12
RE: Arris TG2492 (VM Super hub 3)
Does anyone have the 9.1.116.608 firmware, or a mechanism to log in to this release? I can login to 9.1.116V using the mechanism from the NCC blog and I'm sure there must be other vulnerabilities to allow local login still. I looked at the two UARTs and only get output though someone mentioned the possibility of causing some sort of crash. Also from another site, it seems JTAG is disabled, so not going to try that route.
18-01-2019, 10:32 AM
Find Reply
andy m Offline
Senior Member
****

Posts: 176
Threads: 7
Joined: Dec 2008
Reputation: 4
#13
RE: Arris TG2492 (VM Super hub 3)
nothing else has been done since this thread got made
18-01-2019, 08:28 PM
Find Reply
vmu19 Offline
Junior Member
**

Posts: 6
Threads: 0
Joined: Jan 2019
Reputation: 0
#14
RE: Arris TG2492 (VM Super hub 3)
Ok, well if anyone is interested in collaborating, I have a spare 116V device I bought on ebay to play with and can extract all the disk images from it, as well as one running 608 that I haven't got into yet.
18-01-2019, 08:41 PM
Find Reply
andy m Offline
Senior Member
****

Posts: 176
Threads: 7
Joined: Dec 2008
Reputation: 4
#15
RE: Arris TG2492 (VM Super hub 3)
see what ya can do with it break down the fw from it
19-01-2019, 10:25 AM
Find Reply
vmu19 Offline
Junior Member
**

Posts: 6
Threads: 0
Joined: Jan 2019
Reputation: 0
#16
RE: Arris TG2492 (VM Super hub 3)
ok, I've stuck the files up on keybase, since it's free and has 250GB space.
$ ls /keybase/team/tg2492
mmcblk0p1 mmcblk0p11 mmcblk0p13 mmcblk0p3 mmcblk0p5 mmcblk0p7 mmcblk0p9
mmcblk0p10 mmcblk0p12 mmcblk0p2 mmcblk0p4 mmcblk0p6 mmcblk0p8

https://keybase.io/
19-01-2019, 01:05 PM
Find Reply
andy m Offline
Senior Member
****

Posts: 176
Threads: 7
Joined: Dec 2008
Reputation: 4
#17
RE: Arris TG2492 (VM Super hub 3)
have you managed to break down the fw on this router
19-01-2019, 06:30 PM
Find Reply
vmu19 Offline
Junior Member
**

Posts: 6
Threads: 0
Joined: Jan 2019
Reputation: 0
#18
RE: Arris TG2492 (VM Super hub 3)
I just copied all the partitions off the device with tftp and then extracted them with binwalk
(This post was last modified: 19-01-2019, 07:48 PM by vmu19.)
19-01-2019, 07:46 PM
Find Reply
blacklisted Offline
Haxorware Enthusiast
***

Posts: 27
Threads: 0
Joined: Oct 2018
Reputation: 0
#19
RE: Arris TG2492 (VM Super hub 3)
keep us updated VMU19
19-01-2019, 11:43 PM
Find Reply
eltremendo Offline
Haxorware Enthusiast
***

Posts: 92
Threads: 6
Joined: Apr 2012
Reputation: 0
#20
RE: Arris TG2492 (VM Super hub 3)
(19-01-2019, 07:46 PM)vmu19 Wrote: I just copied all the partitions off the device with tftp and then extracted them with binwalk

hey , how did you copy the partition of it through tftp ?
20-01-2019, 03:20 AM
Find Reply


Forum Jump:


Users browsing this thread: 2 Guest(s)