Nov 7, 20265 min readHow the JioFiber Router Restores an Encrypted Config BackupAfter decrypting my JioFiber router backup, I traced its restore code, found how the checksum was verified, and discovered that the configuration was executed as Lua.
Nov 7, 20264 min readDecrypting the JioFiber Router Config Backup (.enc)My JioFiber JCO4032 router saved its configuration as an encrypted .enc file. I found the firmware code that created it, decrypted it with OpenSSL, and then hit the checksum that protected edited backups.
Nov 7, 20264 min readHow I Got Root Access to My JioFiber RouterThe JioFiber restore path executed its decrypted configuration as Lua before checking the checksum. I used that behavior to start Telnet and get a root shell.