5268ac routers

[90h]

for what it's worth here
some notes from back when:
https://pastebin.com/iz6Rne75
https://pastebin.pl/view/86341379

those basically talk about downgrading to older 10.x version, then generating an rma user password (which has root) on console
(this uses the pseudopasswd utility as mentioned in /sbin/sysinit)

also, a python implementation of the pseudopasswd algo:
https://pastebin.com/SKtazSq3

note that pseudopasswd unfortunately is essentially a hash func - it takes two chars on input to produce one char on output, so not reversible

also lua script for dumping the certs on the box
https://pastebin.pl/view/e4ef26f9