Root password for Kindle non touch (black 2012), firmware 4.1.1 ?

niko_gramophon · 02-03-2013, 04:25 AM

Hello, community,

I have Kindle NT4 (black, 2012). Maybe I'm searching wrong this forum, or I'm the only one, doing the mistake to update my kindle firmware to 4.1.1. Since then the suggested root passwords "mario" and "fiona" doesn't work. I'm able to connect thru SSH thru usb0 network, but none of the passwords seems to work. Tried bruteforcing the root account with hydra like this:

hydra -t 1 -W 50 -v -l root -P wordlist.txt 192.168.15.244 ssh

but the anti-bruteforce security bans me very quickly. Any ideas how to gain again ROOT on MY OWN device?

Thanks in advance,
Niko

andyh2000 · 02-03-2013, 04:34 AM

I've not tried it but there's info on the wiki about finding passwords. It specifically mentions the 2011 K4 but give it a try anyway...

https://wiki.mobileread.com/wiki/Kindle4NTHacking#SSH.3F step 7

Andrew

niko_gramophon · 02-03-2013, 04:37 AM

The password from this url doesn't work for me :/

andyh2000 · 02-03-2013, 04:46 AM

The readme_first.txt file in the usbnetwork package tells you to use something called kindle_tool on the device itself. Or I get the impression you can telnet in with no password and change the password to something you know. Again, I've not done any of this so I may be wrong.

Andrew

ixtab · 02-03-2013, 08:36 AM

Install the latest version of NiLuJe's usbnetwork. It will let you ssh as root with any password.

PS: Moved thread to dev forum.

knc1 · 02-03-2013, 08:46 AM

Quote:

Originally Posted by andyh2000

The readme_first.txt file in the usbnetwork package tells you to use something called kindle_tool on the device itself. Or I get the impression you can telnet in with no password and change the password to something you know. Again, I've not done any of this so I may be wrong.

Andrew

You are not wrong:

This order should work on all firmware versions.
Early firmwares, v-2 and v-3 may also work with the cable attached

un-plug cable (if still plugged in)
toggle USBnetwork ON in launcher
plug the cable
kill any automation (or configure yours to do: )
sudo ip link set up dev usb0 (It may already be up)
sudo ip address add 192.168.15.201 peer 192.168.15.244 dev usb0
use the networking until your done (telnet 192.168.15.244)
un-plug cable
toggle USBnetwork OFF in launcher

Ref: https://www.mobileread.com/forums/sho...d.php?t=204450
That reference leaves you talking to the Kindle with telnet.

If not using the new launcher, then toggle USBnetwork in whatever manner your machine supports.

NiLuJe · 02-03-2013, 05:21 PM

Too lazy to check if they patched the shadow file like on 5.3, but, in case they did, what ixtab said, except with a recent USBNetwork package, it will let you in with anything as the password [or, nothing, even, just enter] (provided you're using the default config: no SSH over wifi). Barring that, what knc1 said, the telnet daemon will *always* get you a root shell straight away.

niko_gramophon · 02-06-2013, 02:36 PM

Hello, community,

thanks for the replies. Seems like I didn't managed to install the USB Network successfully.

What I'm doing:

I'm mounting the Kindle as Storage device. I create file ENABLE_DIAGS in the root of it. Then I go to Settings -> reboot. After that the kindle start in USB network mode, but seems its not from the USBNetwork package, because I can't log with no password, not even with mario, or with fiona***. When I nmap the device.. there is no 20 (telnet) port opened.

Not sure what I've done wrong. How can I check if USBnetwork package is installed OK? And how can I assure my Kindle is jailbroken?

Maybe the biggest mistake was to update to the latest firmware version from amazon :/

Thanks in advance for the answers.

knc1 · 02-06-2013, 02:39 PM

Quote:

Originally Posted by niko_gramophon

Maybe the biggest mistake was to update to the latest firmware version from amazon :/

Thanks in advance for the answers.

ssh (and maybe telnet) was removed from the 4.1.1 diags image by Amazon.

telnet is **NOT** port 20. Sorry.

At the top of the forum you will find a "filter by prefix" thing -
Set the filter to "HowTo" , click show thread, begin reading.

02-03-2013, 04:25 AM	#1
niko_gramophon Junior Member Posts: 3 Karma: 10 Join Date: Feb 2013 Device: kindle 4NT, 4.1.1	Root password for Kindle non touch (black 2012), firmware 4.1.1 ? Hello, community, I have Kindle NT4 (black, 2012). Maybe I'm searching wrong this forum, or I'm the only one, doing the mistake to update my kindle firmware to 4.1.1. Since then the suggested root passwords "mario" and "fiona" doesn't work. I'm able to connect thru SSH thru usb0 network, but none of the passwords seems to work. Tried bruteforcing the root account with hydra like this: hydra -t 1 -W 50 -v -l root -P wordlist.txt 192.168.15.244 ssh but the anti-bruteforce security bans me very quickly. Any ideas how to gain again ROOT on MY OWN device? Thanks in advance, Niko

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How to recover my Kindle root password?	recoco	Kindle Developer's Corner	13	09-17-2019 03:14 PM
Kindle touch Password	somkk	Kindle Developer's Corner	10	06-17-2017 10:15 AM
4.1 Root Password	Villordsutch	Kindle Developer's Corner	13	08-31-2012 09:42 AM
password req to root the edge	littleal	enTourage eDGe	3	06-27-2011 01:34 AM
iLiad Thoughts on 2.5 and root password	TadW	iRex Developer's Corner	16	07-26-2006 03:37 AM

02-03-2013, 04:34 AM	#2
andyh2000 Avid reader Posts: 880 Karma: 6399168 Join Date: Apr 2009 Location: UK Device: Samsung Galaxy Z Flip 4 / Kindle Paperwhite / TCL Nxtpaper 14	I've not tried it but there's info on the wiki about finding passwords. It specifically mentions the 2011 K4 but give it a try anyway... https://wiki.mobileread.com/wiki/Kindle4NTHacking#SSH.3F step 7 Andrew

02-03-2013, 04:37 AM	#3
niko_gramophon Junior Member Posts: 3 Karma: 10 Join Date: Feb 2013 Device: kindle 4NT, 4.1.1	The password from this url doesn't work for me :/

02-03-2013, 04:46 AM	#4
andyh2000 Avid reader Posts: 880 Karma: 6399168 Join Date: Apr 2009 Location: UK Device: Samsung Galaxy Z Flip 4 / Kindle Paperwhite / TCL Nxtpaper 14	The readme_first.txt file in the usbnetwork package tells you to use something called kindle_tool on the device itself. Or I get the impression you can telnet in with no password and change the password to something you know. Again, I've not done any of this so I may be wrong. Andrew

02-03-2013, 08:36 AM	#5
ixtab (offline) Posts: 2,907 Karma: 6736094 Join Date: Dec 2011 Device: K3, K4, K5, KPW, KPW2	Install the latest version of NiLuJe's usbnetwork. It will let you ssh as root with any password. PS: Moved thread to dev forum.

02-03-2013, 05:21 PM	#7
NiLuJe BLAM! Posts: 13,506 Karma: 26047190 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	Too lazy to check if they patched the shadow file like on 5.3, but, in case they did, what ixtab said, except with a recent USBNetwork package, it will let you in with anything as the password [or, nothing, even, just enter] (provided you're using the default config: no SSH over wifi). Barring that, what knc1 said, the telnet daemon will always get you a root shell straight away.

02-06-2013, 02:36 PM	#8
niko_gramophon Junior Member Posts: 3 Karma: 10 Join Date: Feb 2013 Device: kindle 4NT, 4.1.1	Hello, community, thanks for the replies. Seems like I didn't managed to install the USB Network successfully. What I'm doing: I'm mounting the Kindle as Storage device. I create file ENABLE_DIAGS in the root of it. Then I go to Settings -> reboot. After that the kindle start in USB network mode, but seems its not from the USBNetwork package, because I can't log with no password, not even with mario, or with fiona***. When I nmap the device.. there is no 20 (telnet) port opened. Not sure what I've done wrong. How can I check if USBnetwork package is installed OK? And how can I assure my Kindle is jailbroken? Maybe the biggest mistake was to update to the latest firmware version from amazon :/ Thanks in advance for the answers.

Advert

Advert