Pop：其实还在大学时候我就发布了一片关于获取路由器中密码的文章，不过是抓包获取，必须要接触到路由器实体。
（原文地址：获取保存在路由器中的ADSL账号和密码http://429006.com/article/technology/1810.htm），前几天偶然发现其实不需要抓包都行的。
具体原理就是利用备份配置文件来查找，在系统工具->备份系统配置文件得到config.bin即可。
因为config.bin保存的并不是明文文件，这里就需要使用分析工具（RouterPassView），要不然很难看出密码
将配置文件导出后，用RouterPassView打开配置文件就可以看到ADSL密码和用户名，还可以看到登录的用户名和密码，这也是最为有效的方法
Supported Routers支持路由器列表：
Due to large amount of router models available in the market, it's impossible to support all of them.
For now, RouterPassView supports a limited number of router models, and I'll gradually add support for more routers in future versions. Also, be aware that even if your router is not in the list, you can still try to open your router backup file with RouterPassView, because some routers are sold with different brand name, but they still use the same software/chipset of other routers.
Here's the list:
Linksys WRT54GL (With original firmware or Tomato firmware), WRT54G (only some of them), WRT160N, WRT320N, and possibly similar models.
Linksys E5200
Linksys E2000
Cisco-Linksys E4200
Edimax BR6204WG, and possibly similar models.
Siemens ADSL SL2-141, and possibly similar models.
Dynalink RTA1025W, and possibly similar models.
NETGEAR WGT624, and possibly similar models.
ASUS WL-520g, WL-600g, and possibly similar models.
ASUS RT-N10+ , and possibly similar models.
Asus RT-N56U , and possibly similar models.
D-Link DIR-655, DIR-300, and possibly similar models.
Sanex SA 5100, and possibly similar models.
Sitecom WL-351, WL-575, WL-312, and possibly similar models.
COMTREND 536+ (Only Internet Login)
US Robotics 9108 ADSL (internet login and admin login)
D-Link DSL-2540U/BRU/D ADSL2+, DSL-2650U, DSL-520B
D-Link DVA-G3170i/PT
D-Link DSL-604T
D-Link G3670B
D-Link DSL-2640T
D-Link DSL-G684T
D-Link DSL-2500U
D-Link 2740B
D-Link DIR-615 G2
D-Link WBR-1310
D-Link DSL-2543B
D-Link DI-524
D-Link DI-624+A
D-Link DIR-600
D-Link DIR-300
TP-Link TD-8810 ADSL Modem/Router.
Dynamode R-ADSL-C4-W-G1
NetComm NB5Plus4 DSL
Thomson TG580 DSL (only in Hex Dump mode)
Asus RT-G31
HuaWei EchoLife HG520 (Only some of them)
HuaWei HG526
HuaWei-3Com Aolynk BR104
TP-LINK TL-WR841N
TP-LINK TL-WR841DN
TP-LINK TL-MR342
TP-LINK TL-WR340G
TP-LINK TL-R460
TP-LINK TL-WR741ND v2.0
TP-LINK TL-WR700N
TP-LINK TL-WR740N
TP-LINK TL-WA801N
TP-LINK TL-WR541G
TP-LINK TL-WR1043ND
TP-LINK TD-W8960N
TP-Link TL-WR941ND
TP-Link TL-MR3220
Belkin N+ (F5D8236uk4)
Mercury MW54R
Netgear DG632
Netcomm NB6W
Aztech DSL605EW
Comtrend CT-5072T ADSL2+ modem/router
Small Business RV042
Intelbras WRN240
RouterPassView下载地址：
http://www.nirsoft.net/utils/routerpassview.zip
http://www.nirsoft.net/utils/router_password_recovery.html
附：RouterPassView中文语言文件
http://www.nirsoft.net/utils/trans/routerpassview_schinese.zip
如果没有路由器的话，就更加简单了。下载一个ADSL密码查看器就行了，如dialupass
dialupass（ADSL密码查看器）下载地址：
http://www.nirsoft.net/utils/dialupass.zip
http://www.nirsoft.net/utils/dialupass.html
附：dialupass中文语言文件
http://www.nirsoft.net/utils/trans/dialupass_schinese.zip