Help me with encrypted password .

[shady77000]

I've got a huawei HG531s v1 router which requres admin login to access software features like adding APN, uploading device software and so on. After logging in with the details  username:user and password:user and fiddling with the software interface for hours I was able to save the diagnostics file to my PC. A file named downloadconfigfile.conf inside it appears to be containing the admin password in an encrypted form. I would like somebody to help with decrypting the password for the support account. Thanks

<UserInterface>
<X_Web Timeout="5" Language="en">
<UserInfo NumberOfInstances="3">
<UserInfoInstance InstanceID="1" Username="admin" Userpassword="8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918" Userlevel="2"/>
<UserInfoInstance InstanceID="2" Username="user" Userpassword="04f8996da763b7a969b1028ee3007569eaf3a635486ddab211d512c85b9df8fb" Userlevel="1"/>
<UserInfoInstance InstanceID="3" Username="support" Userpassword="a18603086e5bdf9df88ccc9f5a083fed093e819976e87456b74dafcbd7011114" Userlevel="2"/>
</UserInfo>
</X_Web>
<X_Cli>
<UserInfo NumberOfInstances="1">
<UserInfoInstance InstanceID="1" Username="admin" Userpassword="8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918" Userlevel="0"/>
</UserInfo>
</X_Cli>
</UserInterface>

 

[aethernaut]

If that output is correct the so-called password hashes just look like SHA256 hashes of the usernames.

[chrizree]

Yes, either that, or the passwords are simply the same as the usernames

Running the following for the usernames user, admin and support results in the same sha256 output that is said to be the user passwords for the respective username according to the config file output

echo -n '<username>' | sha256sum

[aethernaut]

1 hour ago, chrizree said:

... or the passwords are simply the same as the usernames

That's what I meant 😀