How can I overwrite the CFE partition?

[lenovomen]

Don't forget that the CCP mandates backdoor access to any device sold in PRC if you are concerned about being hacked.

Indeed, US laws also mandate similar access, primarily for national security and law enforcement purposes. For example, the FBI requests lawful access to devices, which functionally resembles a backdoor but is executed within legal frameworks.

 

[bbunge]

You would have had fewer problems if you had taken a hammer to the router.

 

[lenovomen]

You would have had fewer problems if you had taken a hammer to the router.

I don’t want to ruin my router. I just expected a solution similar to OpenWrt with Breed.

 

[bennor]

... and connected this router to my infected Asus router.

What verifiable evidence is there that your Asus router is infected?

 

[Tech9]

I have a Chinese Redmi router for which a bootloader called Breed was developed.

I would put a mask on it just in case. It's a flu season.

 

[lenovomen]

I would put a mask on it just in case. It's a flu season.

This is not funny at all! It’s sad that a person in trouble cannot get any help! I can’t believe it’s so difficult to program a bootloader similar to Breed. I opened this topic for development purposes. I would be glad if, in the future, a malware-free bootloader became easily accessible for the average user as well.

 

[degrub]

Have you tried github ?

 

[lenovomen]

Have you tried github ?

Yes, I know that website. I tried to ask for help here first, but aside from that, I don’t care who develops the bootloader. It would be best if Merlin did it, since the new one would be completely reliable and downloadable from a single source.

 

[Old Fart]

I think a strong padlock is required for this thread !

 

[bennor]

This is not funny at all! It’s sad that a person in trouble cannot get any help!

What trouble are you experiencing that would necessitate the need for a bootloader/CFE file? As was asked previously but which apparently went unanswered. What verifiable evidence do you have and can provide that your router is infected with any sort of malware?

You have repeatedly asking Rmerlin to do something to which they've already replied on. Ultimately it IS NOT RMerlin's responsibility to expend their time and effort to create CFE/bootloader files for every Asus-Merlin supported router. It would ultimately be Asus who you should be contacting since they are the manufacturer of your router not RMerlin. And if the manufacturer refuses to provide a CFE/bootloader file then its up to you to figure out how to exact your own CFE/bootloader file from your own router, or it's firmware.

A reminder of what RMerlin posted on Monday:

The bootloader is factory-installed, and contains personalized information such as MAC addresses. There's no generic image that could be user-installed.

PS: And since Asus-Merlin firmware is not supported on the TUF-AX3000 V2 that you indicate you are using, it is mystifying that you would repeatedly ask RMerlin to provide a CFE/bootloader file for a router that Asus-Merlin doesn't even support.

 

[lenovomen]

What trouble are you experiencing that would necessitate the need for a bootloader/CFE file? As was asked previously but which apparently went unanswered. What verifiable evidence do you have and can provide that your router is infected with any sort of malware?

You have repeatedly asking Rmerlin to do something to which they've already replied on. Ultimately it IS NOT RMerlin's responsibility to expend their time and effort to create CFE/bootloader files for every Asus-Merlin supported router. It would ultimately be Asus who you should be contacting since they are the manufacturer of your router not RMerlin. And if the manufacturer refuses to provide a CFE/bootloader file then its up to you to figure out how to exact your own CFE/bootloader file from your own router, or it's firmware.

A reminder of what RMerlin posted on Monday:

PS: And since Asus-Merlin firmware is not supported on the TUF-AX3000 V2 that you indicate you are using, it is mystifying that you would repeatedly ask RMerlin to provide a CFE/bootloader file for a router that Asus-Merlin doesn't even support.

I have proof, but for security reasons I cannot disclose it! I’m sorry, but this was the last Asus router I purchased. In the future, I will choose Asian Xiaomi products instead, as I see them as more advanced at the moment.

 

[Katana1074]

With respect, unless you provide irrefutable proof that the router cfe has been compromised then no-one is likely to help, at the very least if you have a concern, then contact Asus & the r-merlin dev and go from there.....

 

[lenovomen]

With respect, unless you provide irrefutable proof that the router cfe has been compromised then no-one is likely to help, at the very least if you have a concern, then contact Asus & the r-merlin dev and go from there.....

Alright, I will write to customer support. But I am quite sad and angry, because this is my profession. And what about those who don’t understand it? No matter what security camera they buy, isn’t it possible that none of them will operate reliably if a network virus is able to manipulate the network traffic?

 

[sfx2000]

Going with a signed firmware (which is totally supported by Broadcom's platform) would mean the end of third party firmwares like Asuswrt-Merlin. So, careful what you wish for...

Even worse - it could be signed and encrypted

Most of the Vendor SDK's have levels of security that the OEM can choose to use or not...

 

[bbunge]

But I am quite sad and angry, because this is my profession.

If "this" is your profession then you should know that a piece of consumer grade hardware is not worth the time to fix. At least fix the way you want to fix it!
Use it the way it is, give it away, recycle it or get a big hammer! Grab a beer and chill...

 

[KevTech]

I have proof, but for security reasons I cannot disclose it! I’m sorry, but this was the last Asus router I purchased. In the future, I will choose Asian Xiaomi products instead, as I see them as more advanced at the moment.

Ya go trust the Chinese I am sure that will work out better for you.
All you had to do is Google "extract the cfe asus" to find what you wanted to do.
I really doubt it is infected as no hacker cares about doing something like that.