{"id":4277,"date":"2021-12-01T14:10:32","date_gmt":"2021-12-01T20:10:32","guid":{"rendered":"https:\/\/www.incredigeek.com\/home\/?p=4277"},"modified":"2021-12-01T14:47:43","modified_gmt":"2021-12-01T20:47:43","slug":"obtain-and-decrypt-cambium-wifi-router-password","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/obtain-and-decrypt-cambium-wifi-router-password\/","title":{"rendered":"Obtain and Decrypt Cambium WiFi Router Password"},"content":{"rendered":"\n

By default the passwords are “encrypted” so you can not tell what the password is. <\/p>\n\n\n\n

\"\"<\/a>
No way to view cnPilot WiFi password in the Web UI<\/figcaption><\/figure>\n\n\n\n

We covered <\/a>decrypting the passwords from the config file from cambium cloud. But what about a local router that is not connected to the cloud. What then?<\/p>\n\n\n\n

Thankfully everything you need is on the router. We’ll need to use the command line tools.<\/p>\n\n\n\n

1. Enable SSH<\/h2>\n\n\n\n

First verify that SSH is enabled.<\/p>\n\n\n\n

\"\"<\/a>
Enable SSH n cnPilot<\/figcaption><\/figure>\n\n\n\n

2. SSH into router<\/h2>\n\n\n\n

You may need to specify the “diffie-hellman-group1<\/a>” option if it throws an error.<\/p>\n\n\n\n

ssh admin@192.168.11.1 -o KexAlgorithms=+diffie-hellman-group1-sha1<\/pre>\n\n\n\n
3. Extract Encrypted WiFi Password from config<\/h2>\n\n\n\n
The config file is stored in “etc\/cambium\/bkup-config.txt”<\/p>\n\n\n\n
cat etc\/cambium\/bkup-config.txt | grep <\/pre>\n\n\n\n
This should dump the encrypted password(s).  <\/p>\n\n\n\n
Example Output.<\/p>\n\n\n\n
WPAPSK1=[c760ba8ffe65c669]\nRTDEV_WPAPSK1=[c760ba8ffe65c669]<\/pre>\n\n\n\n
4. Decrypt WiFi Password<\/h2>\n\n\n\n
Now we can decrypt the password.  Replace the string at the end with the encrypted string <\/p>\n\n\n\n
3des_hex -d c760ba8ffe65c669<\/pre>\n\n\n\n
It should now display the decrypted password<\/p>\n\n\n\n
# 3des_hex -d c760ba8ffe65c669\n12345678#<\/pre>\n\n\n\n
Note that it puts the # symbol after the password and if you try to type something in, it clears the line.  you can use the following to have cleaner output.<\/p>\n\n\n\n
echo $(3des_hex -d c760ba8ffe65c669 )<\/pre>\n\n\n\n
That will print the password on it’s own line<\/p>\n\n\n\n
# echo $(3des_hex -d c760ba8ffe65c669 )\n12345678\n#<\/pre>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
By default the passwords are “encrypted” so you can not tell what the password is. We covered decrypting the passwords from the config file from cambium cloud. But what about a local router that is not connected to the cloud. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[637,1266],"tags":[628,1072,795,114],"class_list":["post-4277","post","type-post","status-publish","format-standard","hentry","category-cambium","category-cnpilot","tag-cambium","tag-cnpilot","tag-decrypt","tag-wifi"],"_links":{"self":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/comments?post=4277"}],"version-history":[{"count":6,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4277\/revisions"}],"predecessor-version":[{"id":4285,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/posts\/4277\/revisions\/4285"}],"wp:attachment":[{"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/media?parent=4277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/categories?post=4277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.incredigeek.com\/home\/wp-json\/wp\/v2\/tags?post=4277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}