Transceiver Password Collection

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
N

NablaSquaredG

Bringing 100G switches to homelabs
Aug 17, 2020
1,896
1,311
113
Hey,

I do reprogram transceivers from time to time, and sometimes they require a password to be reprogrammed.

I'll just list all the passwords I have bruteforced here, feel free to let me know if you have other passwords available

Transceiver ModelPasswordSource
Broadex Technologies DDCChh-QLCA0x00 0x00 0x10 0x11 (default QSFP password)@sean233333
Finisar FTL414QB2N-E50x9B 0xB0 0x3D 0xFA@NablaSquaredG
Finisar FTLC1152RGPL6-FB0x00 0x00 0x10 0x11 (default QSFP password)@sean233333
Finisar FTLC1157RGPL6FB10x00 0x00 0x10 0x11 (default QSFP password)@NablaSquaredG
Infinera TOM-10G-SFPP-SR1 / OPLINK TPP1XGDS1CINFE2G0x4F 0x43 0x50 0x00@NablaSquaredG
Innolight TR-FC13T-NAZ0x00 0x00 0x10 0x11 (default QSFP password)@NablaSquaredG


BTW if you have transceivers you would like to have reprogrammed (but do not have the password), let me know, I can put them in the programmer and try to brute force the password
 
Last edited:
  • Like
  • Love
Reactions: Phence, liv3010m, onose and 21 others
N

NablaSquaredG

Bringing 100G switches to homelabs
Aug 17, 2020
1,896
1,311
113
Added some transceivers to the initial post.

Currently brute-forcing AOI AQPLACQ4EDOA1294
 
  • Like
Reactions: blunden
D

d3dx9

New Member
Jul 4, 2023
1
2
3
I though I add my list I found when using a FSBox:


0x5346502B, // [0x53, 0x46, 0x50, 0x2B] "SFP+"
0x22242827, // [0x22, 0x24, 0x28, 0x27]
0x02020202, // [0x02, 0x02, 0x02, 0x02]
0x58475244, // [0x58, 0x47, 0x52, 0x44] "XGRD"
0x80000003, // [0x80, 0x00, 0x00, 0x03]
0x38343732, // [0x38, 0x34, 0x37, 0x32] "8472"
0x38343733, // [0x38, 0x34, 0x37, 0x33] "8473"
0x09050207, // [0x09, 0x05, 0x02, 0x07]
0xA0A1A2A3, // [0xA0, 0xA1, 0xA2, 0xA3]
0x53465058, // [0x53, 0x46, 0x50, 0x58] "SFPX"
0x48585052, // [0x48, 0x58, 0x50, 0x52] "HXPR"
0xFCD3A635, // [0xFC, 0xD3, 0xA6, 0x35]
0xCF454D20, // [0xCF, 0x45, 0x4D, 0x20]
0x82525339, // [0x82, 0x52, 0x53, 0x39]
0x46455355, // [0x46, 0x45, 0x53, 0x55] "FESU"
0x78563412, // [0x78, 0x56, 0x34, 0x12]
0xF0042AB9, // [0xF0, 0x04, 0x2A, 0xB9]
0xF0020AAB, // [0xF0, 0x02, 0x0A, 0xAB]
0x416B3437, // [0x41, 0x6B, 0x34, 0x37] "Ak47"
0xF0051ABA, // [0xF0, 0x05, 0x1A, 0xBA]
0xF0517AB7, // [0xF0, 0x51, 0x7A, 0xB7]
0xAABCAAAD, // [0xAA, 0xAB, 0xAC, 0xAD]
0xC8D9EAFB, // [0xC8, 0xD9, 0xEA, 0xFB]
 
  • Like
Reactions: Stephan and Exhaust8890
A

ariyadubs

New Member
Jul 16, 2025
3
0
1
hi everyone does anyone have the manufacturer password for net one next qsfp-100g-sr4 I've tried all the passwords in this forum and nothing worked
 
Last edited:
A

ariyadubs

New Member
Jul 16, 2025
3
0
1
hi again guys now im having issues with reprogramming mma2p00 module 25g mellanox can anyone help me I've tried every possible password and since my programmer is not that strong brute force is not an option over the fact i left it to brute force for around two days i barely cycled through 200 thousand passwords if you guys can help me its gonna be really appreciated.
 
Q

QuyPhan

New Member
Aug 5, 2025
1
0
1
Hi everyone, could you please help me with the password for Huawei 100G: OM3538SX101 QSFP_SR4 and Huawei 10G:Name:HISILICON /PN: OM9282ZX2A . I want to change the information about them
 
G

gregfenton

New Member
Jan 16, 2022
2
0
1
Any clue on Juniper Networks 740-021308 Rev 01 10GE SFP+ ?
I am about to receive a module so I can access the i2c bus and try myself, but I would be happy to send you one :)
 
G

gregfenton

New Member
Jan 16, 2022
2
0
1
1763410558488.png
It identified as a finisar module, so with a little(!) help from the Jamie's Hack Shack video I reprogrammed my Juniper SFP+ device and it happily now plays Quake 3 Arena over my 10Gb link :)
9B B0 3D FA was the magic number :D

gregfenton said:
Any clue on Juniper Networks 740-021308 Rev 01 10GE SFP+ ?
I am about to receive a module so I can access the i2c bus and try myself, but I would be happy to send you one :)
Click to expand...
 
J

jonasled2

New Member
Nov 12, 2023
2
3
3
I dumped some ubiquiti passwords from ther SFP Wizard:
Code: 
Using downloaded firmware: v1.1.3
Password Database: 1.0.5 or 1.1.1+ (16-byte entries)
Entry size: 16 bytes
Total entries: 59

Unique Passwords:
--------------------------------------------------
  00 00 10 11
  78 56 34 12
  63 73 77 77 ("csww")
  53 46 50 58 ("SFPX")
  80 81 82 83
  51 53 46 50 ("QSFP")

Part Number Mapping:
-------------------------------------------------------------------------------------------------------------------
  Part Number                   Password     ASCII   Locked  RO    Writable Pages
-------------------------------------------------------------------------------------------------------------------
  AOC-SFP10-5M                  00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-10M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-20M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-30M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-5M                  00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-10M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-20M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-30M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-QSFP28-5M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-10M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-20M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-30M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  UACC-UF-OM-XGS                00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  UACC-CM-RJ45-MG               ff ff ff ff          Yes     Yes   A0h/lower
  CM-RJ45-1G                    ff ff ff ff          No      No    A0h/lower
  Uplink-SFP28-.15              ff ff ff ff          No      No    A0h/lower+A2h/upper1
  Uplink-SFP28-0.3              ff ff ff ff          No      No    A0h/lower
  Uplink-SFP28-3M               00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  Uplink-SFP28-30M              00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  UC-D-QSFP28-0.5M              ff ff ff ff          No      Yes   A0h/lower
  UC-D-QSFP28-1M                ff ff ff ff          No      Yes   A0h/lower
  UC-D-QSFP28-3M                ff ff ff ff          No      Yes   A0h/lower
  DAC-QSFP28-0.5M               ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-1M                 ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-3M                 ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-5M                 ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-0.5M                ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-1M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-3M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-0.5M                ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-1M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-3M                  78 56 34 12          No      No    A0h/lower
  DAC-SFP28-5M                  ff ff ff ff          No      Yes   A0h/lower
  OM-MM-10G-D                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-MM-10G-D                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-MM-1G-D                    00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-D                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-D                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-S                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-1G-S                    00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1270                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1290                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1310                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1330                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1450                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1470                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1490                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1510                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1530                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1550                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1570                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1590                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-SR                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-SR                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-LR                   53 46 50 58  "SFPX"  Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-LR                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-QSFP28-LR4                 80 81 82 83          Yes     No    A0h/lower+upper2+upper3/thresholds
  OM-QSFP28-PSM4                80 81 82 83          Yes     No    A0h/lower+upper2+upper3/thresholds
  OM-QSFP28-SR4                 51 53 46 50  "QSFP"  Yes     No    A0h/lower+upper2+upper3/thresholds
 
  • Like
Reactions: cesmith9999 and blunden
B

blunden

Well-Known Member
Nov 29, 2019
1,168
415
83
jonasled2 said:
I dumped some ubiquiti passwords from ther SFP Wizard:
Code: 
Using downloaded firmware: v1.1.3
Password Database: 1.0.5 or 1.1.1+ (16-byte entries)
Entry size: 16 bytes
Total entries: 59

Unique Passwords:
--------------------------------------------------
  00 00 10 11
  78 56 34 12
  63 73 77 77 ("csww")
  53 46 50 58 ("SFPX")
  80 81 82 83
  51 53 46 50 ("QSFP")

Part Number Mapping:
-------------------------------------------------------------------------------------------------------------------
  Part Number                   Password     ASCII   Locked  RO    Writable Pages
-------------------------------------------------------------------------------------------------------------------
  AOC-SFP10-5M                  00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-10M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-20M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP10-30M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-5M                  00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-10M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-20M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-SFP28-30M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  AOC-QSFP28-5M                 00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-10M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-20M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  AOC-QSFP28-30M                00 00 10 11          Yes     No    A0h/lower+A2h/upper1+upper2+upper3/thresholds
  UACC-UF-OM-XGS                00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  UACC-CM-RJ45-MG               ff ff ff ff          Yes     Yes   A0h/lower
  CM-RJ45-1G                    ff ff ff ff          No      No    A0h/lower
  Uplink-SFP28-.15              ff ff ff ff          No      No    A0h/lower+A2h/upper1
  Uplink-SFP28-0.3              ff ff ff ff          No      No    A0h/lower
  Uplink-SFP28-3M               00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  Uplink-SFP28-30M              00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  UC-D-QSFP28-0.5M              ff ff ff ff          No      Yes   A0h/lower
  UC-D-QSFP28-1M                ff ff ff ff          No      Yes   A0h/lower
  UC-D-QSFP28-3M                ff ff ff ff          No      Yes   A0h/lower
  DAC-QSFP28-0.5M               ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-1M                 ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-3M                 ff ff ff ff          No      No    A0h/lower
  DAC-QSFP28-5M                 ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-0.5M                ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-1M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP10-3M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-0.5M                ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-1M                  ff ff ff ff          No      No    A0h/lower
  DAC-SFP28-3M                  78 56 34 12          No      No    A0h/lower
  DAC-SFP28-5M                  ff ff ff ff          No      Yes   A0h/lower
  OM-MM-10G-D                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-MM-10G-D                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-MM-1G-D                    00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-D                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-D                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-10G-S                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SM-1G-S                    00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1270                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1290                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1310                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1330                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1450                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1470                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1490                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1510                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1530                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1550                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1570                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP10-1590                 78 56 34 12          Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-SR                   00 00 10 11          Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-SR                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-LR                   53 46 50 58  "SFPX"  Yes     No    A0h/lower+A2h/upper1
  OM-SFP28-LR                   63 73 77 77  "csww"  Yes     No    A0h/lower+A2h/upper1
  OM-QSFP28-LR4                 80 81 82 83          Yes     No    A0h/lower+upper2+upper3/thresholds
  OM-QSFP28-PSM4                80 81 82 83          Yes     No    A0h/lower+upper2+upper3/thresholds
  OM-QSFP28-SR4                 51 53 46 50  "QSFP"  Yes     No    A0h/lower+upper2+upper3/thresholds
Click to expand...
They have a password database in there now? I just assumed they only tried the default password and then gave up. That not being the case is good news. :)
 
You must log in or register to reply here.
Top Bottom