https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/22MD4KA_MP7/FWLatestVersion.txt https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/27MD5KA_MP4/FWLatestVersion.txt https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/27MD5KL_TBT_PD/FWLatestVersion.txt https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/24MD4KL_TBT_PD/FWLatestVersion.txt
https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/22MD4KA_MP7/ https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/27MD5KA_MP4/ https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/27MD5KL_TBT_PD/ https://lmu.lge.com/ExternalService/lgscreenmanager/mac/FW/24MD4KL_TBT_PD/
The zip passwords were quickly found using the strings
command. The password for each model consists of the model name followed by !LGahslxjqlalfqjsgh!@#
:
- 22MD4KA!LGahslxjqlalfqjsgh!@#
- 24MD4KL!LGahslxjqlalfqjsgh!@#
- 27MD5KB!LGahslxjqlalfqjsgh!@#
- 27MD5KL!LGahslxjqlalfqjsgh!@#
I've only found v3.04 and v3.10 for the 27MD5KA so far:
I'll see if I can brute force the path with ffuf or something for the 27MD5KL variant.