Skip to content

Firmware Repository

IMPORTANT, do not SKIP

Warning: This process is not supported by the manufacturer or supplier of your Gateway.

There is no way of knowing your situation and the process could break your Gateway or reduce its security allowing other people into your network. Anyone following this guide accepts full responsibility for the outcomes.

Firmware versions and URLs if available

For simplicity, model names are reported here without branding codes.

For example DJA0230TLS, where TLS stands for Telstra, is listed here as simply DJA0230 since all of them share the same board mnemonic.

Other branding codes you could see worldwide:

Code ISP Countrie(s)
TLS Telstra Australia (AUS)
TS Telia Sonera Sweden
MYR MyRepublic AUS and Singapore
VDF Vodafone AUS, EU, US and other
FWB Fastweb Italy
TIS Tiscali Italy
TI TIM Italy

Type 1/2/3 indicates if it can be rooted directly. For Type 2, Firmware Root Strategy # indicates how to do it. Please, don't miss these important details whenever you add a new firmware version to this page if you know about that.

TG582n v2 / DANT-7

Fastweb

Type Version Timestamp Root Strategy Mirror
2 15.28.6169_FW_120 2015-07-11 #0 HTTP* - Torrent

TG797n v3 / DANT-O

OSCK Not Required

Firmware images in RBI files for this board are not encrypted with model-specific keys

A basic ADSL only BCM6362 based gateway. Very useful as SIP ATA.

Telstra - T-Gateway

Type Version Timestamp Root Strategy Mirror
2 15.53.6469-510-RA 2016-01-07 #0 #2 HTTP - Torrent
2 16.1.7565-580-RC 2017-06-08 #0 #2 HTTP - Torrent
??? 16.1.8372-580-RA 2018-09-20 - HTTP - Torrent

TG799vn v2 / VDNT-O

Telia

Type Version Timestamp Root Strategy Mirror
??? 15.51.6436 2016-03-21 - HTTP* - Torrent
??? 15.51.6436 2016-05-24 - HTTP* - Torrent
2 16.2.7732 2017-05-02 #0 HTTP* - Torrent
2 17.2.0339 2018-04-16 #0 HTTP* - Torrent
3 17.2.0405 2018-10-17 - HTTP* - Torrent

TG788vn v2 / VDNT-W

Telmex

Type Version Timestamp Root Strategy Mirror
2 17.2.0279 2017-10-31 #3 HTTP - Torrent
2 17.2.0360 2018-07-16 #0 HTTP - Torrent

TG389ac / GANT-1

Com Hem

Type Version Timestamp Root Strategy Mirror
2 15.53.6568 2016-09-09 #0 HTTPS - note: this IS NOT an RBI firmware, it is a raw bank dump, you can't use with TFTP or regular firmware upgrade tools

TG789vac / VANT-D

Model Warning

This is not for the VANT-6, it is for a VANT-D model we often informally refer to as TG789vac v1. This won't boot on more common TG789vac v2/v3.

OSCK Not Known

Nobody has shared the model specific key for decrypting firmware's for this board. Hence, we generally don't know their contents. If you would like to, please create an issue so we can guide you.

MST (no-brand) from UNO.UK

Type Version Root Strategy Mirror
2 16.2.7064 #0 HTTPS

TG-1 / VANT-5

iiNet & Internode

Type Version Root Strategy Mirror
??? 15.32.1509-ver1.4 - None, no RBI available!, this version has been found on some devices. If you have it on your device please share a dump! Ask for help if you don't know how to get the dump.
??? 15.53.6627-ver1.6 - HTTP - Torrent
??? 15.53.7004-ver1.7.1 - HTTP - Torrent
??? 15.53.8141-ver1.9.0 - HTTP - Torrent
??? 15.53.8141-ver1.9.2 - FTP - Torrent

TG789vac v2 / VANT-6

iiNet & Internode

Type Version Timestamp Root Strategy Mirror
2 16.3.7196-ver2.0.5 2016-10-21 #0 Torrent
2 16.3.7637-ver2.2.0 2017-05-23 #0 Torrent
2 16.3.7637-ver2.2.1 2017-06-30 #0 Torrent
1 16.3.8046-ver3.0 2017-12-18 - FTP - HTTP - Torrent
note: this is officially named ver3.0 but it is version 2.3.0 indeed
2 16.3.8046-ver2.5.3 2019-03-22 #2 FTP - HTTP - Torrent

Tiscali

Type Version Timestamp Root Strategy Mirror
2 16.3.7636 2017-04-19 #0 HTTP* - Torrent

MST (no-brand) from UNO.UK

Type Version Timestamp Root Strategy Mirror
2 17.2.0278 2018-01-08 #3 HTTPS

TG799vac / VANT-F

Telstra - Gateway Max

Type Version Root Strategy Mirror
??? 15.18.6052-420-RA - HTTP - Torrent
2 15.53.6886-510-RF #0 #2 HTTP - Torrent
2 16.3.7567-660-RG #0 #2 HTTP - Torrent
2 17.2.0188-820-RA #2 HTTP - Torrent
2 17.2.0213-820-RC #2 HTTP - Torrent
2 17.2.0261-820-RA #0 #2 HTTP - Torrent
??? 17.2.0284-820-RA - HTTP - Torrent

TG799vac / VANT-R

Telia - Trådlös router

Type Version Timestamp Root Strategy Mirror
2 15.51.6436 2016-02-05 #0 HTTPS - note: this IS NOT an RBI firmware, it is a raw bank dump, you can't use with TFTP or regular firmware upgrade tools
2 15.51.6436 2016-05-27 #0 HTTP* - Torrent
2 16.2.7732 2017-05-02 #0 HTTP* - Torrent
2 17.2.0339 2018-02-28 #0 HTTP* - Torrent
2 17.2.0339 2018-04-16 #0 HTTP* - Torrent
3 17.2.0405 2019-03-29 - HTTP* - Torrent

TG799vac Xtream / VANT-W

Telia - Wifi-router Plus

Type Version Timestamp Root Strategy Mirror
??? 15.51.6436 2015-12-23 - HTTP* - Torrent
??? 15.51.6436 2016-02-26 - HTTP* - Torrent
??? 15.51.6436 2016-05-24 - HTTP* - Torrent
2 16.2.7732 2017-05-02 #0 HTTP* - Torrent
2 17.2.0339 2018-02-28 #0 HTTP* - Torrent
2 17.2.0339 2018-04-16 #0 HTTP* - Torrent
3 17.2.0405 2019-03-29 - HTTP* - Torrent

TG789vac v3 / VBNT-1

iiNet & Internode

Type Version Timestamp Root Strategy Mirror
2 18.3.0157-ver3.2.1 2018-11-22 #0 HTTPS - note: this IS NOT an RBI firmware, it is a raw bank dump, you can't use with TFTP or regular firmware upgrade tools
??? 18.3.0442-ver3.4.1 2019-11-14 - FTP - HTTP - Torrent

TG789vax Xtream 35b / VBNT-F

Fastweb - FASTGate

Type Version Timestamp Root Strategy Mirror
2 16.1.6637_FW_108_MOS 2016-03-29 #0 HTTP* - Torrent
2 16.1.6866_FW_111_IAD 2016-05-19 #0 HTTP* - Torrent
2 16.2.7384_FW_209_IAD 2017-01-04 #0 HTTP* - Torrent
2 16.2.7384_FW_209_MOS 2017-01-04 #0 HTTP* - Torrent
2 16.2.7825_FW_212_IAD 2017-06-27 #0 HTTP* - Torrent
2 16.2.7825_FW_212_MOS 2017-06-27 #0 HTTP* - Torrent
2 16.2.8706_FW_214_IAD 2019-04-30 #0 HTTP* - Torrent

TG799vac Xtream / VBNT-H

Telia - Wifi-router Plus v3

Type Version Timestamp Root Strategy Mirror
2 16.2.7732 2017-05-02 #0 HTTP* - Torrent
2 17.2.0339 2018-02-28 #0 HTTP* - Torrent
2 17.2.0339 2018-04-16 #0 HTTP* - Torrent
3 17.2.0405 2019-03-29 - HTTP* - Torrent

TG789vac v2 HP / VBNT-L

MyRepublic

Type Version Timestamp Root Strategy Mirror
2 16.3.7190 2016-10-06 #0 HTTPS - note: this IS NOT an RBI firmware, it is a raw bank dump, you can't use with TFTP or regular firmware upgrade tools

TG800vac / VANT-Y

Telstra - Gateway Max 2

Type Version Timestamp Root Strategy Mirror
2 16.3.7567-660-RD - #0 #2 HTTP - Torrent
2 17.2.0188-820-RA - #2 HTTP - Torrent
2 17.2.0213-820-RB - #2 HTTP - Torrent
2 17.2.0261-820-RA - #0 #2 HTTP - Torrent
??? 17.2.0284-820-RA - - HTTP - Torrent

DGA0130 / VANT-9

Vodafone - Ultra Hub

Type Version Timestamp Root Strategy Mirror
1 17.1.7875-CRF731 2017-09-04 - HTTP - Torrent
2 17.1.7988-CRF846-V2.4.6 2018-05-09 WIP Torrent
3 17.1.7988-CRF897-RC2-4-9 2018-10-21 - Torrent

DJN2130 / VBNT-J

Telstra - Frontier Gateway

Type Version Timestamp Root Strategy Mirror
2 16.3.7413-660-RF - #0 #2 HTTPS - note: this IS NOT an RBI firmware, it is a raw bank dump, you can't use with TFTP or regular firmware upgrade tools
2 17.2.0219-820-RA - #2 HTTP - Torrent
2 17.2.0219-820-RB - #2 HTTP - Torrent
2 17.2.0261-820-RA - #0 #2 HTTP - Torrent
2 17.2.0284-820-RA - #2 HTTP - Torrent

DGA4131 / VBNT-O

Fastweb - FASTGate

Type Version Timestamp Root Strategy Mirror
2 17.2.0214_FW_219 2017-10-17 #1 HTTP* - Torrent
2 17.2.0245_FW_223 2017-11-28 #1 HTTP* - Torrent
2 17.2.0245_FW_226 2017-12-22 #1 HTTP* - Torrent
2 17.2.0279_FW_233 2018-04-13 #1 HTTP* - Torrent
2 17.2.0279_FW_235 2018-06-22 #1 HTTP* - Torrent
2 17.2.0392_FW_245 2018-10-24 #1 HTTP* - Torrent
2 17.2.0407_FW_247 2018-12-06 #1 HTTP* - Torrent
2 17.2.0412_FW_248 2018-12-15 #1 HTTP* - Torrent
??? 18.3.n.0439_FW_258 2020-01-21 - HTTP* - Torrent

DJA0230 / VBNT-V

Telstra - Smart Modem (Gen1)

Type Version Timestamp Root Strategy Mirror
2 17.2.0188-820-RA - #2 No RBI available, this version has been found on some devices. If you have it on your device please share a dump! Ask for help if you don't know how to get the dump.
2 17.2.0288-820-RA - #2 HTTP - Torrent
2 17.2.0320-820-RA - #2 HTTP - Torrent
2 17.2.0406-820-RC - #2 HTTP - Torrent
2 17.2.0468-820-RA 2019-07-19 #0 #2 HTTP - Torrent
2 18.1.c.0429-950-RA 2019-09-20 #2 HTTP - Torrent
2 18.1.c.0443-950-RA 2019-10-21 #2 HTTP - Torrent

DNA0130 / VBNT-Z

Vodafone - Ultra Hub Plus

Type Version Timestamp Root Strategy Mirror
2 17.4.0182CRF877-RC2.0.1 2018-11-19 WIP Torrent

DJA0231 / VCNT-A

Telstra - Smart Modem (Gen2)

Type Version Timestamp Root Strategy Mirror
2 18.1.c.0215-950-RA - #0 #2 HTTP - Torrent
2 18.1.c.0241-950-RA - #2 HTTP - Torrent
2 18.1.c.0283-950-RA - #2 HTTP - Torrent
2 18.1.c.0347-950-RC - #0 #2 HTTP - Torrent
2 18.1.c.0384-950-RB - #2 HTTP - Torrent
2 18.1.c.0443-950-RB 2019-11-20 #2 HTTP - Torrent
2 18.1.c.0462-950-RB 2020-02-14 #2 HTTP - Torrent

What to do if your firmware is not listed here

If you want to get an image of a Technicolor firmware which is not listed here you have two main options:

  • Try searching very deeply in the web for the original RBI file. Most ISP's keep all firmware's released via remote upgrade on their server, so you may resort into just guessing the right URL

  • Try getting root access on a device currently running the firmware you are looking for and grab a dump of its firmware partitions (banks)

  • Ask kevdagoat and he will use his CRF Guesser :)

Read further below to get some more useful tips.

If you find another firmware for a Technicolor gateway which is not yet listed, create an Issue so it can be added!

Guessing RBI Firmware URL's

The stock bootloader allows TFTP flashing only with the correct RBI firmware file for the hardware board mnemonic version (something like XXXX-X).

The Firmware filename combination is usually ISP specific, so the first thing to do is to find another known firmware from the same ISP to get a better idea of how it should look like. As you can see from below links, it is often constructed by combining:

Product Vendor + Hardware + CRF + Firmware

Using the web interface, go to Advanced >>Gateway. In here you will find the Product Vendor, Hardware Version (aka board mnemonic) and Firmware Version:

Global Information
Product Vendor      Technicolor
Product Name        Technicolor TG797n v3
Software Version    15.3
Firmware Version    15.53.6469-510-RA
Hardware Version    DANT-O

If the Gateway is rooted, the CRF number can be found in /rom/etc/config/env

Obtain by running cat /rom/etc/config/env | grep "CRF"

option CONF_VERSION 'CRF483'

You can also run

strings /etc/cwmpd.db

Which may yield some firmware URL's.

The ISP may have customized firmware version numbers to match their own versioning scheme. If so, check the contents of /rom/etc/config/versioncusto.

Once you have guessed it please create an issue to get it added!

Newer firmware images are often encrypted with a board-specific AES-128 (thus symmetric) key, called OSCK. When flashing via either TFTP or web interface, the gateway first decrypts the RBI and then flashes it to the inactive bank.

Every firmware image is also verified by asymmetric keys. This second action is performed on boot by the stock bootloader which will fail to boot if the signature verification fails.

Make a raw device dump

Firmware partitions, called banks, contain signed and read-only squashfs images that get extracted from RBI files during regular firmware flash or upgrade. These images cannot boot on different boards and do not include any sensitive info about your own device so they are totally safe to be shared.

In usual dual-bank devices the two firmware partitions are named bank_1 and bank_2, at least one of them has to contain valid firmware in order to boot correctly.

To make a full dump of them you can easily use the built-in busybox dd command:

dd if=/dev/mtd3 of=/tmp/bank_1.dump
dd if=/dev/mtd4 of=/tmp/bank_2.dump

Please note the two banks are usually mapped to mtd3 and mtd4 respectively, but you should always check yourself by reading contents of /proc/mtd from your own device (eg. cat /proc/mtd).