Kindle PW root password: something changed?

[aesop]

Hi Everyone,-

After having successfully converted a few demo PW1 to proper e-readers, I have run into one that I can't login to.

So, my questions are:
1. Has anything changed lately in terms of "discovering" the root password?
2. How long should the serial number be (that is entered into the "generator")?
3. Is an N at the end necessary? http://www.xodustech.com/guides/kind...te-demo-unlock

I used the 16 digit S/N shown by the Kindle when booting (did copy/paste, no typing).
https://www.sven.de/kindle/
It comes up with two 7/8-digit password of which the first 5 is fiona.
But none of them work...

I tried the framework/mario username-password combo and it does not work either...

Any pointers/advice/hints would be appreciated...

Thanks.

[knc1]

Originally Posted by aesop

Hi Everyone,-

After having successfully converted a few demo PW1 to proper e-readers, I have run into one that I can't login to.

So, my questions are:
1. Has anything changed lately in terms of "discovering" the root password?
2. How long should the serial number be (that is entered into the "generator")?
3. Is an N at the end necessary? http://www.xodustech.com/guides/kind...te-demo-unlock

I used the 16 digit S/N shown by the Kindle when booting (did copy/paste, no typing).
https://www.sven.de/kindle/
It comes up with two 7/8-digit password of which the first 5 is fiona.
But none of them work...

I tried the framework/mario username-password combo and it does not work either...

Any pointers/advice/hints would be appreciated...

Thanks.

No changes in the past several years.

The passwords are for when running the 'diags' system.
The 'main' system does not accept a password (for any user).

You need to be using the KindleTool to generate passwords, the various web pages are not always up to date (that one you linked to has failed for other people also).

The following may help (they are for any 5.x series firmware, not just the K2):
https://wiki.mobileread.com/wiki/KT2_Index
Use the ;dsts command to bring up the settings menu, check the serial number there.

[aesop]

Thanks, knc1.

Yes, I use DIAGS mode: interrupting boot and running bootm 0xE41000; then going to the login prompt.
It is a French (Canadian) version... And I tried that other password generator as well...

Will check the ;dsts command. Not very optimistic since framework/mario does not work...

I suspect someone was fiddling with it and then dropped. Not sure how it was converted back to demo mode though...

Thanks.

[knc1]

Originally Posted by aesop

Thanks, knc1.

Yes, I use DIAGS mode: interrupting boot and running bootm 0xE41000; then going to the login prompt.
It is a French (Canadian) version... And I tried that other password generator as well...

Will check the ;dsts command. Not very optimistic since framework/mario does not work...

I suspect someone was fiddling with it and then dropped. Not sure how it was converted back to demo mode though...

Thanks.

Some devices have both normal and demo mode available.

Is the demo mode working properly?

bootm 0xE41000 should get you the recovery menu - -
export usb
put an Amazon Update package at root of usb
select recover from usb storage.

Or at least that was the sequence with a recent pw3.
It should be still front index page here, started by MadMAXXX about recovering with fastboot.

That device did not even have a diags kernel or file system installed when we recovered it.

[sguerrini97]

I'm having the same problem with a KT2 (not in demo mode). I connected to the serial interface and any password generated by scripts, kindletool or the website in this thread is not working for the root account. On the other hand I can login with framework/mario. Any suggestion? Thanks and sorry for my english.

[knc1]

Originally Posted by sguerrini97

I'm having the same problem with a KT2 (not in demo mode). I connected to the serial interface and any password generated by scripts, kindletool or the website in this thread is not working for the root account. On the other hand I can login with framework/mario. Any suggestion? Thanks and sorry for my english.

The passwords generated are good **only** for the 'diags' system.
The 'main' system has passwords disabled.

Be certain you are running the 'diags' system (Kindles are dual-boot).

[aesop]

Originally Posted by sguerrini97

On the other hand I can login with framework/mario.

I my (similar) case
https://www.mobileread.com/forums/sho...d.php?t=269780
even the "framework" user could open the /etc/shadow file.

I copy pasted the first line (for user root) and run it through JTR using the wordlist option.
https://www.mobileread.com/forums/sho...d.php?t=160490

The real (!) password was revealed in 0.0 sec...