Joseph C. Lehner

If the eCOS password isn't `ubeecable`, you'll have to dump the firmware using `bcm2dump`, and send it to me!

Hi, I've already implemented this encryption method in the past ([source](https://github.com/jclehner/bcm2-utils/blob/master/crypto.cc#L492)), but it's not being used by any profile at the moment. I'd be interested in a sample `GatewaySettings.bin` file,...

Nice work! I've pushed a few commits - there were some issues with the implementation of the "encryption" for this device, but I've adapted them to match [your python scripts](https://github.com/Swyter/netgear-cg3100-config-decoder)....

If you find the time, please enter the bootloader menu, and then see if the following works (after compiling from source, using the latest commits): ``` bcm2dump -L io.log -vv...

The login credentials for telnet are `remote_acc_user` and `remote_acc_pass`. To enable telnet via the config file, also run ``` bcm2cfg set GatewaySettings.bin userif.remote_acc_methods telnet ```

Hi! Unfortunately, you used the address of `SpiFlashWrite` (`0x83f8119c`) as the `read` function of the NVRAM section. This explains why the code wiped the NVRAM instead of reading from it!...

> I don't have the username/password for the eCos console Were you successful in dumping `image1`? If so, the key should be in there somewhere! If you want, you can...

> I tried putting it into IDA but it doesn't detect the majority of the code, and I don't want to manually go through the whole thing... maybe I haven't...

> I had some time for another look. Dunno how I missed it last time but one working username/password combo at least is MSO/changeme. Does the serial console require a...

Very interesting, that's the first device to have a password-protected serial console. I'll have to add support for that in the future!