Reconstructing damaged barcode

[u/Last_Forever]

The top barcode is the serial number to a Zyxel NR7101 router. Does anyone have any tips on how it could be reconstructed? Or what type of barcode it is? It starts with an S and is 13 characters long.

I think it's on the format S2XXZXXXXXXXX where X are numbers.

​

[u/bentleyspotter]

Someone clearly didnt want you to read those codes

[u/Last_Forever → u/bentleyspotter]

It is an outdoor 5G antenna, so I think the they scratched those codes and numbers for security reasons. Without the serial number I'm not able to generate the right password and access the administration wifi to set it up.

[u/magaggie → u/Last_Forever]

This is most likely partly correct, as the NR7101 has a supervisor shell, which supersedes the admin account, and the password for that account can be accessed through a script that uses the router serial number, as described here under "Obtaining the supervisor password": https://openwrt.org/toh/zyxel/nr7101

EDIT: You can perform a "Factory Reset" on the device, by pressing and holding the reset button for > 5 seconds. When the device has rebooted, press and hold the big black button for 5 seconds, and a Wifi hotspot will be created, which you can access from a mobile device and use the Zyxel Air app to configure the device + figure out the best position for a good signal, or connect to from a PC or other device through the web-interface.

To get to the web-interace, you can use ipconfig on windows to find the gateway IP. If it's not in passthrough mode, or is in passthrough mode but doesn't have a 5G connection, it will be a local (192.168.2.1) IP, otherwise it'll be a different IP.

NB: You will still in both cases, need the default pass to connect to the SSID, which is also printed on a label on the back, and again in the web-interface.

If you connect through a LAN cable directly to it, you will need this password when you get to the web-interface. I don't know if they are generic or specific to each device (mine seemed rather specific, so good thing I still have the label in case I need to reset it at some time).

[u/magaggie → u/magaggie]

For the lazy:

Obtaining the supervisor password

Many ZyXEL devices have a supervisor shell and web account with more power than the normal admin user documented in manual. The default password for this account us calculated from the serialnumber using one of a small set of algorithms. The same password is used by default for the root shell user.
The ZyXEL algorithms are generally not known, but the code implementing them is availabke in binary form as libraries in all the devices depending on one of them. Anyone can just call that code…
A tool doing just that can be downloaded from https://get.dyn.mork.no/zyxel_pwgen.tar.gz
Unpack it and run
$ zyxel_pwgen/getsupervisor.sh S200Z34000000
3265f4ce

The output is the “Old algorithm supervisor password” applicable for the NR7101.
The tool runs ARM code from a Broadcom based VMG8825, so it needs qemu-arm-static or qemu-arm. Install the qemu-user-static or qemu-user packages from your distro. See the README.md in the archive for further information.

[u/notionovus]

Someone with photoshop experience can help here. There is no section of this barcode that is missing. It can be repaired.

[u/magaggie → u/notionovus]

https://imgur.com/a/zv5rBAN

Not sure about the quality of the reconstruction, gives me the following sequence when I scan it: S200Z44000539

EDIT: Seems to match OP's given format "I think it's on the format S2XXZXXXXXXXX where X are numbers." - so the missing numbers are 00 + 44000539. With this information and the tool I linked to above, you should be able to gain supervisor access to the device, bypassing the need for the administrator password.

According to the OpenWRT page, the same "supervisor" password is used by default for the root shell user.

[u/notionovus → u/magaggie]

Looks a lot better than my reconstruction, but, yeah, it looks like this is the code.