Linksys RTP300 unlocked and setup with Asterisk

This information is already floating around the internet, due to the fact that there are so many curious people that got rid of vonage and wanted to use their routers for other reasons, and or with other providers.

So here’s our take on it.

We dug up an old RTP300 with the vonage firmware. As we attempted to “hack” away at the unit we found that all the username combinations we found scattered across the good ole’ internet didn’t work so we used (probably by now) the infamous cyt tool. What does the cyt tool do you ask? It simply resets the “admin” and “user” accounts with default passwords. This basically allows you to clear all of the pre-configured sip settings and upgrade to the latest firmware. It does this by creating a socket session using port 2400 to reconfigure the xml settings on the box.

So how do you get it? Well we provide it right here for you. It includes all the instructions that you’ll need to run the tool in the readme file.


Now that you have the passwords changed you can log into the interface with the new username and password combination. The username and password should be “user”. (Don’t forget you’ll have to log in to the router first with the username and password “admin”.)

Next go to Linksys website and download the firmware release 3.1.24. You’ll find that if you attempt to upgrade the router with this file you’ll run into some trouble.  No worries, there are a couple more steps before you are up and running. All you have to do is download a hex editor, open the .img file in it and make a couple of changes.

The following changes will need to be made.

On the second line the eight value or pair it will say 4d – change it to 4c. So to the far right you should see “….CYLL@0…..”

On the very last line you need to change the 5th, 6th, 7th and 8th values. Change them from 85 da 20 bb – to 3b a5 4d da. Save it and now upgrade the firmware on your router.

At this point your router should be upgraded and you should be running the latest firmware. Cool huh.

If you click on the voice link and click on the admin login you’ll see line 1, line 2, etc. All you have to do is enter the asterisk extension and password. Simply register the RTP300 like any other sip device; plugin any regular phone and your good to go.

Converting/Unlocking/Upgrading the firmware on a Cisco 7970 7975 from SCCP to SIP and Vice Versa

So we figured we would do a write up on converting, hacking, unlocking or whatever you want to call it) the firmware on a cisco 7970/7975. First off you need to have the firmware available to you. You will need a CCO account on Cisco’s website to do so. If we were allowed to redistribute the firmware we would, but because Cisco prohibits this you will have to find your own means of obtaining it. Please select the option to download the firmware files only.

Once you download the files unzip them and upload it to your tftp server. As an example we used version 8.4.1, so the files you should have would look like the following.


Once you upload these files you will need to create and upload the cnf.xml file that your phone will use to upgrade the firmware.

It will have to be named SEP<MAC ADDRESS>.cnf.xml

You can download it here:

Download “SEP(Mac_Address)” – Downloaded 1099 times – 206 B

Make sure you change the cnf.xml file to fully match the version of firmware you have downloaded.

Thats all there is to it. You should have a fully functioning phone running in sip mode; or if you revertted back to sccp then a fully functioning phone in sccp mode.

Wirefly - LG Dare from Verizon Wireless + 3 Piece Accessory Bundle