### [【光猫】ZTE 中兴光猫全系列打开telnet工具](https://www.vwodis.com/article/2383.html)

**Published:** 2023-03-17T01:55:42

**Author:** ml3665666

**Excerpt:** ZTE 中兴光猫全系列打开telnet工具 ENV python3 -m venv .venv source …

ZTE 中兴光猫全系列打开telnet工具

# ENV

python3 -m venv .venv  
source ./.venv/bin/activate  
pip install -r requirements.txt

# zte\_factroymode.py

open telnet(use embed user/pass to 192.168.1.1 80):

`python3 zte_factroymode.py telnet`

or custom args

`python3 zte_factroymode.py --user CUAdmin --pass CUAdmin --ip 192.168.1.1 --port 80 telnet open`

$ python3 ./zte\_factroymode.py -h  
usage: zte\_factroymode \[-h\] \[–user USER \[USER …\]\] \[–pass PASS \[PASS …\]\] \[–ip IP\] \[–port PORT\] {telnet,serial} …

options:  
\-h, –help show this help message and exit  
–user USER \[USER …\], -u USER \[USER …\]  
factorymode auth username (default: \[‘factorymode’, ‘CMCCAdmin’, ‘CUAdmin’, ‘telecomadmin’, ‘cqadmin’, ‘user’, ‘admin’, ‘cuadmin’, ‘lnadmin’, ‘useradmin’\])  
–pass PASS \[PASS …\], -p PASS \[PASS …\]  
factorymode auth password (default: \[‘nE%jA@5b’, ‘aDm8H%MdA’, ‘CUAdmin’, ‘nE7jA%5m’, ‘cqunicom’, ‘1620@CTCC’, ‘1620@CUcc’, ‘admintelecom’, ‘cuadmin’, ‘lnadmin’\])  
–ip IP route ip (default: 192.168.1.1)  
–port PORT router http port (default: 80)

subcommands:  
valid subcommands

{telnet,serial} supported commands  
telnet control telnet services on/off  
serial control /proc/serial on/off

# zte\_hardcode\_dump.py

decrypt /etc/hardcodefile

`./zte_hardcode_dump.py test/hardcode test/hardcodefile/*`

$ python3 ./zte\_hardcode\_dump.py -h  
usage: zte\_hardcode\_dump \[-h\] hardcode hardcodefile \[hardcodefile …\]

positional arguments:  
hardcode the /etc/hardcode file which contains root key  
hardcodefile config files under /etc/hardcodefile

options:  
\-h, –help show this help message and exit

**Categories:** 光猫路由器

---