Tuesday, March 13, 2007

NIM100 Web Interface Password (Hack Part 5)

Now that we have root access, how do we change the configuration so that we can manage this NIM100 for our needs?

http://169.254.1.1 from your web browser of choice will get you to the web interface of the NIM100.


Oohps, Password required ....

A quick check of ./etc/passwd gives us the password "entropic" no quotes.

... and voila' we are in.

Happy hacking, and please post a comment if you decide to do something with this !!!

7 comments:

joe40 said...

I have been playing with the Motorola NIM100 using the info you provided here. I got in no problem. At first it was set to 169.254.1.2. I set it to 192.168.0.111 in an effort to get it to work with my new router (Dlink DIR-655), Video On Demand no longer works. I have opened ports in my router, added the MAC Address of the NIM100 to the router, forwarded traffic to the address for the NIM100, I even put the NIM100 in the DMZ, no go. Seems I need to use the Dlink DI-624 that Verizon provided to get this to work. Perhaps I should reset the device to factory settings? I do not know how to do it, or I would.

Francesco Caggioni said...

The STB have do have to get a IP address I believe between xxx.xxx.xxx.100 and 150 they use DHCP v6 in order to recognize that something is a STB. Since I do not have FiOS TV yet I did not look too much into this. But I will definitely try to look into this by looking at the settings of the actiontec.

joe40 said...

I made great progress with the NIM 100 and my router setup last night. Apparently, it does assign an IP address to each of the 5 boxes in my house. I set the router up to recognize the MAC addresses of each box and pre-assigned a DHCP address to each one. The router shows them in use as 192.168.x.x addresses. When I telnet into the NIM100 and do an arp -a command as well as an ifconfig -a, then you really see alot of info. The sames 5 boxes the router sees as 192.168.x.x, the NIM100 see as 169.254.x.x. Also I was able to set the date on the NIM100 with a date -s command. The NIM100 appears to be running uclinux. It also makes reference to the Intel ixp425 access library (CSR1.1) and BusyBox v.0.60.4. I'm not sure what those are.

Anonymous said...

I am trying to modify this thing to be used as a WAN bridge. But it can't go down to 1000ghz where the WAN signal from Verison comes in. I think its the mask, but I am not sure how to change it, any help?

Francesco Caggioni said...

/proc/tags is a flash pseudo-filesystem used to store the configurations.
If you overwrite /proc/tags/CLNK, the settings will be saved.

Change the Channel Mask to enable all the channels that you want.

Anonymous said...

Thanks for your NIM100 hacking!

I decided to buy some NIM100s on eBay thanks to your posts, instead of buying Geffen Ethernet-over-Coax boxes. Will use them to connect the "garden house" to my ADSL connection.

mike said...

lemming thanks for your help, i know its been 2 years since you started this but to change the mhz to 1000 i edit that file, do i telnet into it? i am in telnet but not sure how to open up the file. i tried the cp commmand.

Labels