Horaco 2.5GbE Managed Switch (8 x 2.5GbE + 1 10Gb SFP+)

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

JBI

New Member
Nov 29, 2023
11
2
3
Thank you. I flashed it on Horaco without any problems. From version 1.3 to 1.7. You can't see the difference :)
 
  • Like
Reactions: SlowmoDK

OnnoO

New Member
Oct 12, 2023
12
2
3
Just received my switch (unbranded). I did not expect to see the exact same internals as the unmanaged switches, including the 2 seperate switch chips. Also, I received mine with firmware 1.7.
 

das1996

Member
Sep 4, 2018
75
17
8
I wish they'd put out a change log to indicate what's changed in the new fw besides version number.

In addition, adding ntp functionality and a comment or description field would be helpful. I have multiple switches in the house (5?). I remember the ip addresses but can't remember which is where. On the dlink's the comment reflects location - ie living room, basement, garage, den, etc.
 

Ozymandias

New Member
Jun 2, 2022
7
6
3
Poking in the firmware I can see that there is a "production test login" at /login_ft.cgi
I've not delved any further though.
 

das1996

Member
Sep 4, 2018
75
17
8
This was mentioned in one of the discord channels.

Poking around in the fw file ($00044bb0) we can see the following.

hengrui 81d57ea79621e8887914f40ee4122185
admin f6fdffe48c908deb0f4c3bd36c032e72

The admin md5 hash is a combination of the login+password - ie adminadmin

---
# echo -n 'adminadmin' | md5sum
f6fdffe48c908deb0f4c3bd36c032e72
---

Knowing this, we know that "hengrui" is the login name and also the first characters of the string that comprises "81d57ea79621e8887914f40ee4122185" md5 checksum.

Any bash experts (or hashcat) care to brute force this?
 

tamuin

Member
Oct 22, 2023
31
16
8
If you are doing a dictionary attack be aware that "hengrui" is a person's name and also the name of a large pharmaceutical company in China.
 

das1996

Member
Sep 4, 2018
75
17
8
Actually the main channels have to do with bypassing isp provided equipment in favor of using your own, primarily for att and bell systems.


Look under MISC, hardware, SWTG118AS
 

villovil

New Member
Dec 1, 2023
4
0
1
How can you extract that file format? I tried to do it and it said "It is in an unsupported format".... What program did you use?
No worries, I got it figured out.... even though it gave that error the file was extracted. I was able to update the firmware on my Sodola 9 port variation of this switch (2.5g x8 & 1 SFP+) but I an not happy that after doing that it factory reset the switch. Can you imagine doing this after a year when you have 6 VLANs, a couple port groups and other configurations all dialled in, and you can't even remember how you configured it in the first place because you did it so long ago?
I am also kind of uncomfortable with the fact that there doesn't seem to be any online presence from the manufacturer where users are able to go download new firmware. It's a bit weird that the only way to get these updates it to email a vendor from AliExpress... But as it stands now, the alternative to get that type of support is to spend 4x as much for something from the mainstream manufacturers
 

das1996

Member
Sep 4, 2018
75
17
8
^^There is a save settings option. Use that before updating next time. In my case I updated immediately after getting the sw before setting any thing up.

I agree, more documentation is needed, especially change log of what's actually updated other than the version number string. Ultimately, you get what you pay for. This is bottom of the barrel electronics IMO. I got years old netgear and link managed switches that still work just fine. They were bought used to begin with on ebay.

Maybe they're even produced in the same/similar factory, just without the brand name. Do we know what socs the netgear/tplink 2.5gb switches use?
 
  • Like
Reactions: villovil

tamuin

Member
Oct 22, 2023
31
16
8
This was mentioned in one of the discord channels.

Poking around in the fw file ($00044bb0) we can see the following.

hengrui 81d57ea79621e8887914f40ee4122185
admin f6fdffe48c908deb0f4c3bd36c032e72

The admin md5 hash is a combination of the login+password - ie adminadmin

---
# echo -n 'adminadmin' | md5sum
f6fdffe48c908deb0f4c3bd36c032e72
---

Knowing this, we know that "hengrui" is the login name and also the first characters of the string that comprises "81d57ea79621e8887914f40ee4122185" md5 checksum.

Any bash experts (or hashcat) care to brute force this?
Wouldn't be easier to edit the firmware file and replace

hengrui 81d57ea79621e8887914f40ee4122185

with

hengrui 631b1a40ed0769ac34410ca76fa5b990

which is hengruihengrui
 

Ozymandias

New Member
Jun 2, 2022
7
6
3
My 1.3 backup wouldn't restore on 1.7 so I re-entered my settings. I always try to make notes and save screenshots of my configurations. BIOS updates have drummed that into me!
 
  • Wow
Reactions: das1996

das1996

Member
Sep 4, 2018
75
17
8
^^Wow. That's too bad. With most devices, previous backups usually import fine into newer fw, just not the other way around. Will have to keep that in mind if/when I ever update the fw on this again.

Realistically, unless there's some significant bug fixes or new features added, how often do you update switch fw...
 

villovil

New Member
Dec 1, 2023
4
0
1
^^Wow. That's too bad. With most devices, previous backups usually import fine into newer fw, just not the other way around. Will have to keep that in mind if/when I ever update the fw on this again.

Realistically, unless there's some significant bug fixes or new features added, how often do you update switch fw...
Normally I try to update firmware on my home appliances (switches, routers, etc) every 3-6 months... I surely won't be doing that with this... I'll probably look out for firmware with desired new features and deploy those. However I am not holding my breath for updates much further than a year from now. I figure once they release new hardware, we won't even get the back channel bin files anymore
 

das1996

Member
Sep 4, 2018
75
17
8
^^I dare not apply that concept to updating my car's infotainment. Each new update seems to break/remove features. IE when I got the car originally it had a manual day/night/auto adjustment for display. After the first update, they took that away, auto only now. That's progress!!