Download Station Wifi-router

Hi,

i've got a Download Station Wifi-router from European Download Station.
http://en.wikipedia.org/wiki/File:DS_Downloadstation.jpg
normally, it makes it possible this to connect to Internet with DS without WEP, SSID,...
the firmware is modified by Nintendo

But, Nintendo, put a "protection" , it is necessary to parameterize the router with each modification of the cable network.
the SSID is Shared, but there is not Internet. (only the DS and WII can if to connect)
so, I have the procedure to access the router, but I miss Password !!
you can find procedure manual on my FTP: HERE
I have to try to force the access with a software, but nintendo has to make safe the page in HTTPs!!
they say: please read the manual of "Linksys WRT54G for connecting Nintendo DS equipement to Internet". but, I do not have it.

so, I NEED HELP !

Picture:
Router <3D>
Sticker 1
Sticker 2
Sticker 3

sorry if you do not understand all, I speak French. not to hesitate to ask me.

 

has this firmware been dumped? Can you dump it for us?

 

It is likely just a MAC address filter. Nothing more.

-hl718

 

Have you tried default passwords like username: admin password: admin? Or perhaps username: <blank> password: admin?

 

yes

i can't ! i've no password !

better, Router recognize the DS. your DS this connects with or without WEP, any adjustment is not necessary!

 

have you tried hard resetting it? That should make it set back to admin/password.

 

yes, don't work

 

1) You don't need the password to dump the firmware (though you would need to open the system).

2) MAC address filtering with wildcards would do exactly what you describe. It's nothing fancy.

-hl718

 

nop
i always search password

 

Nintendo might have modified the firmware, but I doubt they found (and fixed) all the security holes. Maybe you'll have some luck with one of the WRT54G exploits out there, for example this one - "reset the administrative password" and "enable remote management" sound interesting. Good luck.

Btw, what exactly would we want dumped? I seem to recall a Download Station DS' firmware was dumped, which turned out to be one of the retail ones, with all the magic happening in the carts (not 100% sure though). What would we do with a modified router FW, look for teh axxess codez to Nintendo's secret network, or something? I'd think they just hardcoded new defaults, passwords and maybe MAC filters to prevent misconfiguration by store staff.

 

mmh no, you have Download Station cartridge for download demo on DS (i have)
this router is use for Internet access only. i havn't see nintendo firmware.
i need for to use (i work on convention, & Nintendo regards this material as "DEV". I cannot thus have it ... theoretically… but Nintendo knows that I have it )

exactly for that I seek them

 

if you have a tutorial for that

 

Sounds like they have indeed hard coded the u/p into the firmware. If dumped I have one of these routers hanging around to test it on.

And judging by the manual it looks like they've hardcoded quite a few parameters. Probably nothing special firmware wise.

 

http://www.hacking-gurus.net/2009/08/24/linksys-wrt54g-series-exploit/
http://www.securiteam.com/securitynews/5NP0D15GUE.html
http://jercos.dyndns.org/~jercos/linksys-pinghack.htm

Best I can recall there isn't any way to dump the firmware if it is run of the mill Linksys firmware, only 3rd party firmware ever had the option to dump the existing firmware. MAYBE you can via some command over tftp or telnet but you still need to know the password for you to be able to get access to the damn thing over telnet. Even then I would imagine Nintendo might have disabled telnet access and assuming they didn't they could have easily disabled any and all commands relating to firmware dumping.

Experimentation is key, or removing the flash chip and dumping it the old fashioned way.

 

thx,
i will try

 

It's easy to dump the firmware, you can JTAG it and do a dump over a parallel port..

look up WRT54G JTAG recovery and use the steps: where it says to overwrite, just READ ONLY

After that, you can open it up in HEX and look for the ASCI...

 

i will try this >> http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270528612875
ping exploit don't work ^^

 

Is there any information on the case about what hard ware version this router is? I would be interested in putting this firmware on another router if it ever gets dumped and released. If it does not say something like ver 2.2 on the bottom you can look up the FCC ID (http://www.dd-wrt.com/wiki/index.php/Supported_Devices#Cisco_Linksys_.28Wireless_a.2Fb.2Fg.29).

 

wtf? i work at a retailer... we dont have anything like that lmfao we just have a old school DS that says Nintendo Event System or something on it. we just pop carts in when they ask.

 

Most retail stores (such as GameStop) have just that. Clearly this setup is a bit different and in need of having a full fledged router hanging around.

Maybe for sending traffic over a VPN? Would be good to allow people to have Pokemon battles in sanctioned locations without using encryption as well as preventing people from having a leechfest with free WiFi.