beating-the-machine / cablemodem_junkyard

Cable modem firmware dump

#Junkyard The Cable Modem Hacking Repo.

###OSS:

• NVG589
• NVG510
• NVG595
• NG764X
• SB6141
• SB61XX
• SB6183
• SB5101
• SBG6580
• SBV6X2X
• SBG901/SBG941
• SVG1501/SVG2501

###Documentation:

• Arris C3 CMTS
• Arris C4 CMTS
• Cisco UBR 7200 CMTS
• Touch Stone Telephony
• Firmware Release Notes
• Motorola BSR 6400 CMTS
• Serial Port & Modem Basics
• The Cable Modem Hacking Bible
• DOCSIS 3.0 Security Specification
• DOCSIS 3.1 Security Specification
• SNMP CPE Access Control in DOCSIS
• DOCSIS 3.1 Pocket Guide 2014 (CableLabs)
• Unpacking Firmware Images from Cable Modems

###Papers:

• CMTS setup
• Sniffing Cable Modems
• TWC Approved modems list
• DOCSIS Insecure By design
• Cable Modem Hacking How-to
• DSL and Cable Modem Networks
• Hacking DOCSIS for fun and profit
• Hacking the cable modem Part 1 & 2
• Surfboard Cable Modem Shell Commands
• Understanding DOCSIS Data Throughput
• DOCSIS Cable Modem Connection Process
• DOCSIS 1.1 Cable Modem Termination Systems
• Creating DOCSIS Cable modem configuration files

###Videos:

• Sniffing Cable Modems
• Hacking DOCSIS For Fun and Profit
• The ARRIStocrats: Cable Modem Lulz
• Free Anonymous Internet Using Modified Cable Modems

###Posts:

• Technicolor tc7200 cable "modem"
• Rooting The NVG510 from the WebUI
• dump admin and wifi password from LAN
• Motorola NVG510 Reverse Engineering Information

###Books:

• Hacking the cable modem

###Configs:

• TWC Encrypted Configs

###Firmware Images:

• VMDG
• Ubee
• Arris
• Motorola
• SBH Alpha
• Haxorware
• Forceware
• Un-Categorized
• Suddenlink Signed
• Firmware Image Dump

###Exploits:

• arris_dg950.rb
• ubee_ddw3611.rb
• sbg6580_enum.rb
• SBG6580 DoS Reboot (2014)
• vap2500_tools_command_exec.rb
• Arris VAP2500 - Authentication Bypass(2014)
• arris_motorola_surfboard_backdoor_xss.rb
• ARRIS DG860A NVRAM Backup Password Disclosure (2013)
• Thomson Wireless VoIP Cable Modem - Authentication Bypass

###Websites:

• wikidevi

###Tools:

• Takeover
• arrispwgen
• DOCSISutils
• docsis_server
• lzma-unpacker
• rlaager/docsis
• docsis-configfile
• arrispod (Android)
• TM602X (Arris POTD C++)
• SNMP walking & Configuration binaries

###Wiki:

• What is UART ?
• What is JTAG ?
• What is DOCSIS ?
• What is a CMTS ?
• Who is Comcast ?
• Who is Broadcom ?
• Who is Motorola ?
• Who is CableLabs ?
• Who is ARRIS Group ?
• What is a Cable Modem ?
• Who is Ubee Interactive ?
• Who is Time Warner Cable ?
• Who is Texas Instruments ?
• What is a SPI ? (Sparkfun)
• What is a SPI ? (Wikipedia)
• Who is Cox Communications ?
• Who is Bright House Networks ?

###Contribute:

• Send a pull request of a Cable Modem firmware image that isn't already on the list.

Update:

• This has been updated with more files. I will try and keep this updated.

Note:

• This repository is 624.0 MB+ (which is almost githubs limit), once the limit is reached, this will only be here for historic purposes, but the repository will live on in another location. Once that time comes, that location will be revealed.
• update , This repo will be updated with newer stuff

Donations:

• 3M1YT8ZvxxdbdspJ74PSRG1RAAa5SyVAZU