Verizon ONT Firmware Analysis

แชร์
ฝัง
  • เผยแพร่เมื่อ 23 ม.ค. 2025

ความคิดเห็น • 50

  • @xKold
    @xKold 22 ชั่วโมงที่ผ่านมา +7

    not sure if this helps you, but that hash is 99999999988888888

  • @TheITTroubleShooter
    @TheITTroubleShooter วันที่ผ่านมา +47

    MoCA (Multimedia over Coax Alliance)
    MoCA technology is utilized on the coaxial cable (coax) side of the Optical Network Terminal (ONT).
    With your ONT, it would typically be paired with a Verizon router, such as the Actiontec MI424WR. The coaxial cable from the ONT would be connected to a splitter, which would then distribute the signal to both the TVs and the router’s coaxial connection. The set-top boxes for the TVs rely on the router because the router, using MoCA, delivers essential data such as the TV guide to the set-top boxes.

    • @baudneo
      @baudneo วันที่ผ่านมา +1

      Nice breakdown!

    • @matthewmiller6068
      @matthewmiller6068 วันที่ผ่านมา +4

      Also that series ONT they used MoCA for the internet WAN interface - typical install was the ONT went outside and fed the POTS and Cable-TV lines, then the FiOS router took the place of a cable modem, and FiOS STBs took place of cable STBs. It didn't normally use the RJ45 network jack *at all*, though it could in some less common deployments.
      STBs used the MoCA LAN thru the FiOS router to do TV guide, On Demand, Apps, and other stuff beyond the regular QAM digital TV channel output the ONT also pushed out.

    • @user-lt2rw5nr9s
      @user-lt2rw5nr9s วันที่ผ่านมา

      My parents have DirecTV and it sets up a MoCA network for networking similarly. Some cable modems have MoCA built-in, which is pretty handy in an old house without Ethernet runs.

    • @TheITTroubleShooter
      @TheITTroubleShooter วันที่ผ่านมา

      @@user-lt2rw5nr9s
      Yea, MoCA was widely adopted by many providers at the time. It was an excellent choice because it allowed providers to quickly roll out significantly improved services using the existing coaxial infrastructure already in homes. Verizon dedicated substantial resources to the initial rollout of FiOS, and without their ONT technology leveraging MoCA, they would not have been able to deploy services to so many customers in such a short time.

    • @JoeMamaTheSecond
      @JoeMamaTheSecond 21 ชั่วโมงที่ผ่านมา +1

      ​@@baudneo yo baudneo, been using your cync-lan project

  • @AdamChirico
    @AdamChirico วันที่ผ่านมา +13

    Matt, kudos to you for having another go at this firmware. As much as I enjoy seeing you solve a problem first time around, I enjoy seeing you use your community to take a second shot at it more. Keep up the awesome work.

  • @309electronics5
    @309electronics5 วันที่ผ่านมา +13

    Busybox is basically a package that includes a ton of Unix(-like) commands into 1 single linked executable. Its common on embedded systems due to it being opensource. Android uses Toybox instead of busybox.
    Also MoCa means: Multimedia over Coaxial alliance

  • @johncoles
    @johncoles วันที่ผ่านมา +10

    Generally MoCA would be for sending things over coax/cable as it stands for Multimedia over Coax Alliance, so that file is likely to configure that. I would guess the password (given the other was just numbers) is like a group/client limiting so you can only use provided MoCA adapters from your ISP.

  • @owenpierce
    @owenpierce วันที่ผ่านมา +1

    Excited to see how the smart plug hacking goes! In college I had an embedded systems security class where my team hacked a Kasa Smart plug to arbitrarily turn off and on the device at will.
    TP-Link seems to like to reinvent the wheel on poor encryption mechanisms.

  • @bnk28zfp
    @bnk28zfp 15 ชั่วโมงที่ผ่านมา

    Sound like part3 is coming! Thank you Matt!

  • @jokuapina
    @jokuapina วันที่ผ่านมา +8

    your videos are good continue making videos

  • @PawelKraszewski
    @PawelKraszewski วันที่ผ่านมา +1

    busybox is extendable, so instead of creating some standalone business-specific executable, they simply made it a part of busybox.

  • @acdarc
    @acdarc วันที่ผ่านมา +20

    Pro-tip: You can clear your screen by pressing Ctrl+L and no need to give the whole 'clear' command.

    • @Tehbom
      @Tehbom 20 ชั่วโมงที่ผ่านมา +4

      now I need to remove my 'lear' alias, thanks!

    • @iliqiliev
      @iliqiliev 7 ชั่วโมงที่ผ่านมา +1

      Maybe he does it this way to show the viewer why the screen got cleared

    • @acdarc
      @acdarc 7 ชั่วโมงที่ผ่านมา +1

      @@iliqiliev Probably, it just drives me mental as it's so much faster and convenient to press ctrl+l :).

    • @iliqiliev
      @iliqiliev 7 ชั่วโมงที่ผ่านมา

      @ I get it I'm the same :D

  • @robertclark8351
    @robertclark8351 วันที่ผ่านมา

    Great stuff Matt. Thanks also for the tools list and mentioning the discord.

  • @pauljames9596
    @pauljames9596 วันที่ผ่านมา +5

    Even though I don't understand computer science words 😂, I find this very interesting!

    • @differntname2807
      @differntname2807 วันที่ผ่านมา +2

      I find the best way to learn is to immerse yourself in what you don't know.
      Keep it up and I'm sure you'll figure things out more quickly than you expect 🙂

  • @Bagrat-III
    @Bagrat-III วันที่ผ่านมา +1

    Big fan of you. Thank you for your content ❤❤❤

  • @fabulousfab282
    @fabulousfab282 21 ชั่วโมงที่ผ่านมา

    Whaou, quelle grande aventure passionnante. Merci pour les explications.

  • @IGlitchHopperI
    @IGlitchHopperI วันที่ผ่านมา

    I see Matt and i click

  • @ThisIsJustADrillBit
    @ThisIsJustADrillBit วันที่ผ่านมา +1

    I think Matt is a prophet from the future warning us what to avoid and understand before it's too late lol ❤

  • @GoldenDumpling
    @GoldenDumpling วันที่ผ่านมา +2

    Older versions of the Verizon FiOS router (the big black one), from pre-2010 were overbuilt and left the VxWorks debug port open. Might be worth looking in to..

  • @mikehensley78
    @mikehensley78 23 ชั่วโมงที่ผ่านมา

    I love the videos. This is the music of my people! 🤓

  • @RogerCarvalhoS
    @RogerCarvalhoS วันที่ผ่านมา +8

    Crackstation has this hash in their db

    • @playgame38
      @playgame38 วันที่ผ่านมา

      For anyone else, copy and paste: 0bb605db177fcd8ffc1ffe2e110fa61b568ffba1

  • @huntingtheexperience
    @huntingtheexperience วันที่ผ่านมา +2

    I wonder what the "admPswd 8 entropic" was for. Web interface?

  • @74_Green
    @74_Green 21 ชั่วโมงที่ผ่านมา

    I've got a pair of Tapo P100, so looking forward.

  • @JasonScottHamilton
    @JasonScottHamilton 11 ชั่วโมงที่ผ่านมา

    Have you tried hashing the MAC address?

  • @tujuprojects
    @tujuprojects 2 ชั่วโมงที่ผ่านมา

    That sounds like a license violation if they linked their own stuff inside the busybox GPL binary. Ask the source code from the distributor.

  • @LetMeFixItNow
    @LetMeFixItNow 3 ชั่วโมงที่ผ่านมา

    it's time for me to build a DIY setup like you. Not has detailed, but i would like to read a FW, extract it and see what i find (just like you did to learn the cli..etc). I will buy something on ebay that you have already "showed" so that i can follow along. or do you know where i can download a *.BIn and then use that to build up a rocky VM and test the tools/cli

  • @Markus-fw4px
    @Markus-fw4px วันที่ผ่านมา

    How do you learn all this stuff? I love it, but where to begin? Is there literature? Learning by doing?

  • @noanyobiseniss7462
    @noanyobiseniss7462 20 ชั่วโมงที่ผ่านมา +1

    One thing I would like to know from this device if it does the check for a mac lockdown.

  • @robertclark8351
    @robertclark8351 วันที่ผ่านมา

    If the config file is not found, use the hard defaults? Perhaps the hard defaults are embedded in the binary?

  • @seabeepirate
    @seabeepirate 11 ชั่วโมงที่ผ่านมา

    Any update on the knockoff chromecast?

  • @tujuprojects
    @tujuprojects 2 ชั่วโมงที่ผ่านมา

    tty2 is not a serial, it would be ttyS. moca_tp_* smells more like a function name. Maybe it’s sh function as printout does not have parenthisis.

  • @sulistya.y3683
    @sulistya.y3683 วันที่ผ่านมา

    can you do it for ZTE onu, i extract the firmware, edit and pack again then flash to the onu but failed, i thunk its because signature or smth

  • @vinnys8328
    @vinnys8328 วันที่ผ่านมา +4

    Babe wake up Matt Brown just dropped another video!

  • @matthewmiller6068
    @matthewmiller6068 วันที่ผ่านมา

    Maybe the endian-ness is off? This reminds me of some work I have had to do with Power-PC VME systems and interfacing other systems required some annoying byte-swapping much like this.

    • @lethal_larry
      @lethal_larry 17 ชั่วโมงที่ผ่านมา

      this was my first thought. would love if someone could reply their thoughts on why it would/wouldn't be the case.

  • @Robbie-mw5uu
    @Robbie-mw5uu 5 ชั่วโมงที่ผ่านมา

    Discord needs to be shut down

  • @kalidoom1674
    @kalidoom1674 วันที่ผ่านมา

    correct me if i am wrong but, can you create a image of that os and run it in a sandbox env? I would think since that the bootloader is decrypted. also have you tried numbers only and adding eight (8) 0 to the password. e.g 00000000112233 just like the reddit post?