How to Hack Android Phones Remotely Using Kali Linux Kali Linux is a ubiquitous hacking tool used by hackers to obtain access to other devices. This is an operating system that can be either installed on a computer or a virtual disk. Technical Truth.wifi hacking appsLatest Android apps for wifi hackingHello friends. In this video i have show you the 3 best wifi hacking apps.Please subsc. Support for Technicolor CGM4140COM from Videotron in Canada Help Wanted Model Support Request. #150 opened on Mar 22 by manjotsc 1 of 3. Support for Technicolor DMA0120VHA (VBNT-R) from Vodafone in Australia Model Support Request. #144 opened on Jan 31 by mrjasonjordan 1 of 3. Hacking Technicolor Gateways. This guide has been moved to: It is better organized and easier to follow. It is also more general and therefore may apply to any similar Technicolor device not originally listed here. If you have any updates or changes to make, please edit this new one on GitHub.

NOTE: This guide is probably not going to be updated and it will remain here as an archive.

Current / new updates were originally published on the Whirlpool Wiki, but are now published at https://hack-technicolor.readthedocs.io/en/stable/

Archived content follows:

The basics
Really advanced topics !

The basics

The TG799vac, known more commonly in Australia as the “Telstra Gateway Max” is a very capable piece of equipment. It has 802.11ac, a VDSL / ADSL2 modem (meaning NBN FTTN compatibility), a DECT base station, 2 x FXS ports for analogue ports, and an FXO port, is known for getting high sync speeds for VDSL2, has a high quality internal PCB and power supply and it's power consumption is quite good at 12 watts with WiFi on (typical router config) and 9 watts with WiFi off (typical bridge mode config). The newer verstions of this device are the TG800 'Telstra Gateway Max 2' and DJN2103 'Telstra Gateway Frontier', which most of the following will also apply to, if the device has a firmware version low enough, or which it can still be downgraded to.They are provided directly to Telstra – and as such, has Telstra branded firmware. There is no ‘generic’ firmware available that will just give you access to the modem as any other device you would purchase. Personally, I think this kind of sucks – as if you decide to use this device with anyone other than Telstra, you lose access to the VoIP functionality, DECT base station, FXO ports. That was the motivation to get into this device and re-enable as many features as possible.By default, the IP address of the modem will be 10.0.0.138.This guide is the 'new version' which uses the flashing tool developed by Mark Smith as well as the input from the Whirlpool community to enable as many features as possible.To use this guide you must be on firmware 17.2.0188-820-RA or lower (there are reports that the 17.2.0188-820-RB variant has the web flashing functionality disabled) or be able to downgrade to it.What you will need to proceed:

The AutoFlashGUI tool. This is compiled for windows but if you have Python 3 installed see the instructions at the top of the sourceautoflashgui.py for installing missing modules so you can run this on any OS (the latest version will ask to install missing modules but if it fails you may have to install them manually). Make sure you can run this tool and load the GUI up before you go offline!
The v16.3 firmware rbi for your modem.
The v17.2.0188-820-RA rbi file for your modem (If you flash to anything newer you may lock yourself out of the modem permanently).
A SSH client. The famous Putty SSH client is recommended on Windows.
A copy of this web page for reference while you're offline.
Physical access to the modem so you can power cycle it and unplug the WAN/DSL while you're going through this process.
A 'happy' modem! If it's in bridge mode or half the tiles are missing on the screen (which seems to be caused by corrupted config), factory reset it first.

The basic steps to getting root access to firmware v17.2 on your modem

These instructions refer to the TG799, so if you are doing this for a different modem be sure to use the correct file names for the firmare.Run up the AutoFlashGUI tool and flash vant-f_CRF683-17.2.188-820-RA.rbi to your modem.This will take about 3-4 minutes. The flasher will try and root your modem but it will fail (silently) - this is expected. If the flash fails to push the firmware in, try again (is the username and password correct?), and if it still fails with some permission error in the console, you may have been locked out of flashing via the web interface: bad luck. Maybe a PXE firmware load can help but you require good luck at this point. Ask for help in the whirlpool thread! (Note that firmware before v15.x may require some manual work, see 'My firmware is so old that AutoFlashGUI can't authenticate to the modem!' )Now use AutoFlashGUI to flash in vant-f_CRF687-16.3.7567-660-RG.rbi and allow it to run through including getting root.At this point we are ready to do the procedure to activate root on 17.2 and switch over to it. This procedure works by allowing us to mod the inactive (but newer) image's file system and config, then switch back to it without doing a factory reset or official upgrade. Note that if you factory reset while on 17.2 you will need to run the entire procedure from where you flashed v16.3 to get root back, and it could upgrade and lock you out permanently in that reset state if it has internet access!Fire up your SSH client and connect to the modem on port 22.Have a look at your current modem state. It should look something like this: These modems use two flash partitions (bank_1 and bank_2) which can be upgraded/used almost independently. They are digital-signature verified before boot so you can't edit the rom image in the flash. The config is stored in the matching folder in /overlay i.e. /overlay/bank_2 (hint: you can see your modified config files in here if you want to back stuff up or see what changes you made). When a proper factory reset is done, the overlay partition is formatted (but not securely wiped - see section later). Run the following to set 17.2 up for temporary root and switch back to it:Now check it all looks right - you should get this output from the last command:Reboot and wait 3 to 4 minutes for the modem to boot into 17.2.

Setting up firmware v17.2

Log in to the modem with SSH on port 6666 using root/root. At this point you have temporary root on 17.2, but it's not how we should leave things.Run the following in SSH to turn on more functionality and clean up. Note that you can only paste so much into the terminal in one go, so if you get weird errors just cut the block back a bit and try again:Now change the root password:Reboot now if you're not doing any futher configuration.At this point you should now be able to SSH in on 17.2 with root and your password (which should no longer be root at this point!)

VOIP Setup

If you want to use VOIP, the following is the quickest way to set it up and remove some broken config that causes calls to be sent out via the FXO port which will be unplugged for everyone in Australia once you are on NBN unless you are in a fixed wireless area where the voice services are still being delivered over the copper lines. We also reset the LAN SIP inbound passwords here for security (see 'LAN SIP client use of the mini-PABX in the modem' to use them if you wish to but nothing else has to be done). Please don't post the default passwords in public forums as they could be a security risk for those still using them!

Speeding up VDSL sync times

If you're on VDSL you may be able to speed up your sync times by removing redundant DSL profiles so the modem does not even try to use them. Don't do this if you're still on ADSL!If you wish to add the selections to the web interface to play with later, you can run the following:

Running the TG799 as the router with a second router behind it (double nat)

Double NAT used to break many things, but testing with this configuration shows that most current applications are very tollerant of it. Most applications assume they are on a private network and that their visible IP is not the one they are visible on on the internet via, so if it's nested one more level down via NAT with a DMZ redirecting traffic to the second router's WAN interface it makes very little difference (if this guide is followed)!There are many reasons you would want to do this:

You have a complex network setup with a more advanced router running services such as a VPN server and you still want to use the VOIP in the TG799 so that it can manage the packet priority tagging properly.
You don't quite trust the TG799
You want a simpler solution than the 'Using bridge mode with a dedicated PPPoE ethernet port' section below outlines which can be a n

Technicolor Router Hacker Using Android