Transceiver Password Collection

[NablaSquaredG]

Hey,

I do reprogram transceivers from time to time, and sometimes they require a password to be reprogrammed.

I'll just list all the passwords I have bruteforced here, feel free to let me know if you have other passwords available

Transceiver Model	Password	Source
Broadex Technologies DDCChh-QLCA	0x00 0x00 0x10 0x11 (default QSFP password)	@sean233333
Finisar FTL414QB2N-E5	0x9B 0xB0 0x3D 0xFA	@NablaSquaredG
Finisar FTLC1152RGPL6-FB	0x00 0x00 0x10 0x11 (default QSFP password)	@sean233333
Finisar FTLC1157RGPL6FB1	0x00 0x00 0x10 0x11 (default QSFP password)	@NablaSquaredG
Infinera TOM-10G-SFPP-SR1 / OPLINK TPP1XGDS1CINFE2G	0x4F 0x43 0x50 0x00	@NablaSquaredG
Innolight TR-FC13T-NAZ	0x00 0x00 0x10 0x11 (default QSFP password)	@NablaSquaredG

BTW if you have transceivers you would like to have reprogrammed (but do not have the password), let me know, I can put them in the programmer and try to brute force the password

 

[NablaSquaredG]

...added Finisar FTL414QB2N-E5

 

[NablaSquaredG]

...added Innolight TR-FC13T-NAZ

 

[sean233333]

Transceiver Model
FINISAR
FTLC1152RGPL6-FB

Password
0x00 0x00 0x10 0x11 (default QSFP password)

 

[sean233333]

Transceiver Model
Broadex Technologies
PN: DDCChh-QLCA

Password
0x00 0x00 0x10 0x11 (default QSFP password)

datasheet

https://en.broadex-tech.com/product-datasheet-dnld-link/DS-000022-E%20V001_DDCChh-QLCA_100G%C2%A0QSFP28%20CWDM4-UK.pdf

100G CWDM4 QSFP28 | Broadex Technologies

en.broadex-tech.com

 

[sfpCoder]

I can confirm that many FINISAR transceivers use 9B B0 3D FA. Even the HP compatible FTRJ-8519-7D, aka. HP J4858A uses it.

 

[prathiksha l]

Finisar’s FDB-1027 Evaluation Board SFP/SFP+
Can I know the password for this evaluation board?

https://www.mouser.com/datasheet/2/775/Finisar_FDB_1027_Spec_RevB-2326054.pdf?srsltid=AfmBOop854CWp3FIruSBFxFxRHSKt6r0MBOZ4RwVbFKiOM_RmEKcvtwY

 

[NablaSquaredG]

Added some transceivers to the initial post.

Currently brute-forcing AOI AQPLACQ4EDOA1294

 

[prathiksha l]

I can confirm that many FINISAR transceivers use 9B B0 3D FA. Even the HP compatible FTRJ-8519-7D, aka. HP J4858A uses it.

This password is not working to connect software and evaluation board

 

[joeribl]

This password is not working to connect software and evaluation board

Not sure why you are posting in this topic. The password here are for Transceivers, not a dev board, so different topic.

 

[d3dx9]

I though I add my list I found when using a FSBox:


0x5346502B, // [0x53, 0x46, 0x50, 0x2B] "SFP+"
0x22242827, // [0x22, 0x24, 0x28, 0x27]
0x02020202, // [0x02, 0x02, 0x02, 0x02]
0x58475244, // [0x58, 0x47, 0x52, 0x44] "XGRD"
0x80000003, // [0x80, 0x00, 0x00, 0x03]
0x38343732, // [0x38, 0x34, 0x37, 0x32] "8472"
0x38343733, // [0x38, 0x34, 0x37, 0x33] "8473"
0x09050207, // [0x09, 0x05, 0x02, 0x07]
0xA0A1A2A3, // [0xA0, 0xA1, 0xA2, 0xA3]
0x53465058, // [0x53, 0x46, 0x50, 0x58] "SFPX"
0x48585052, // [0x48, 0x58, 0x50, 0x52] "HXPR"
0xFCD3A635, // [0xFC, 0xD3, 0xA6, 0x35]
0xCF454D20, // [0xCF, 0x45, 0x4D, 0x20]
0x82525339, // [0x82, 0x52, 0x53, 0x39]
0x46455355, // [0x46, 0x45, 0x53, 0x55] "FESU"
0x78563412, // [0x78, 0x56, 0x34, 0x12]
0xF0042AB9, // [0xF0, 0x04, 0x2A, 0xB9]
0xF0020AAB, // [0xF0, 0x02, 0x0A, 0xAB]
0x416B3437, // [0x41, 0x6B, 0x34, 0x37] "Ak47"
0xF0051ABA, // [0xF0, 0x05, 0x1A, 0xBA]
0xF0517AB7, // [0xF0, 0x51, 0x7A, 0xB7]
0xAABCAAAD, // [0xAA, 0xAB, 0xAC, 0xAD]
0xC8D9EAFB, // [0xC8, 0xD9, 0xEA, 0xFB]

 

[ariyadubs]

hi everyone does anyone have the manufacturer password for net one next qsfp-100g-sr4 I've tried all the passwords in this forum and nothing worked

 

[ariyadubs]

hi again guys now im having issues with reprogramming mma2p00 module 25g mellanox can anyone help me I've tried every possible password and since my programmer is not that strong brute force is not an option over the fact i left it to brute force for around two days i barely cycled through 200 thousand passwords if you guys can help me its gonna be really appreciated.

 

[QuyPhan]

Hi everyone, could you please help me with the password for Huawei 100G: OM3538SX101 QSFP_SR4 and Huawei 10G:Name:HISILICON /PN: OM9282ZX2A . I want to change the information about them

 

[gregfenton]

Any clue on Juniper Networks 740-021308 Rev 01 10GE SFP+ ?
I am about to receive a module so I can access the i2c bus and try myself, but I would be happy to send you one

 

[gregfenton]

It identified as a finisar module, so with a little(!) help from the Jamie's Hack Shack video I reprogrammed my Juniper SFP+ device and it happily now plays Quake 3 Arena over my 10Gb link
9B B0 3D FA was the magic number

Any clue on Juniper Networks 740-021308 Rev 01 10GE SFP+ ?
I am about to receive a module so I can access the i2c bus and try myself, but I would be happy to send you one