ZTE680 Hardware V4.0 (V2?) Hack

TOP meneame.net

I just got recently installed my first FTTH router (pepephone, but same model is used in masmovil and jazztel) and as any network engineer I wanted to have full access to the router. Looking over the vast internet I found a blogpost that used a USB with a symlink to smb.conf so it can be edited to add exec parameters to execute an downloaded busybox to open an alternative telnetd but the article had a big problem that make it imposible to work on my router: the F680 of the article has an ARM architecture. My router has MIPS instead. This is important to know beforehand if using external-downloaded busybox binaries. In the end I skipped the busybox hack to directly allow admin telnet connection instead the buggy limited one. This is how I did it, I will assume that router has IP address 192.168.1.1.

  1. Using any windows, format any pen-drive in NTFS.
  2. Using any linux, mount the NTFS formated pen-drive, change directory to the mounted path and do the following symlink:

    ln -s /var/samba/lib/smb.conf .

  3. Plug the pen-drive in the router. Ensure Samba Service is enabled.
  4. Connect to \\192.168.1.1. This is a tricky part because the router only has SMBv1 which has been disabled since the WannaCry mess. I used my mac to connect to smb://samba@192.168.1.1/samba.
  5. If ecerything is going fine you will see the smb.conf file in the connected shared. This part is tricky too because in windows you can only edit it with notepad++. In mac textedit and vi failed both to properly edit the file so I ended doing the following:
    echo "[global]
      guest account = root
      deadtime = 5
      log level = 0
      server string = Samba Server
      security = share
      load printers = no
      workgroup = workgroup
      short preserve case = yes
      preserve case = yes
      netbios name = smbshare
    [samba]
      comment = samba share dir
      read only = no
      guest ok = yes
      guest only = yes
      short preserve case = yes
      preserve case = yes
      max connections = 3
      path = /mnt
    [root]
      exec = sendcmd 1 DB set TelnetCfg 0 UserTypeFlag 0; sendcmd 1 DB save
      comment = samba share root
      read only = no
      guest ok = yes
      guest only = yes
      short preserve case = yes
      preserve case = yes
      max connections = 3
      path = /" > /Volumes/samba/usb1_1/smb.conf

    This router version only has one USB so the path ‘usb1_1′ should be fine. The differences between the original file and this version are the guest account = root and the root share, which includes a exec to change telnet behaviour. Actually the root share is just to mess with root file system but not really needed.

  6. Without disconnecting the actual share or rebooting the router (changes will be lost!) open a new connection to the router (shares samba or root will be fine).
  7. Now the telnet should be in admin mode. Try connecting to 192.168.1.1:23 with username root and password Zte521. Congratulation! you should now have an unlimited telnet inside the router.
  8. To be able to connect as admin in the web interface do a sendcmd 1 DB p DevAuthInfo in the telnet session and search for the admin password. The admin password is a pre-router generated password so is unique to your router.

I also wanted to do a full unencrypted dump of the configuration so in the telnet terminal do the following:

for i in `sendcmd 1 DB p | awk ‘{print $2}’`; do echo $i; sendcmd 1 DB p $i; done

Prepare for a extensive dump of data.

Also you can download a precompiled busybox-mips and win some commands as vi, uname and netstat.

<< Volver

3 comments to “ZTE680 Hardware V4.0 (V2?) Hack”

  1. Comment by vinicio:

    username root and password Zte521 does not work

  2. Comment by Francesc:

    Hello,
    i connect, but when i have todo anything:
    /bin/sh: Access Denied
    i can’t do anything.
    can you help me, please.
    Thanks.

  3. Comment by TerryTrila:

    What is Alesse?
    Recommendations
    Precautions and Contraindications
    Interactions
    Side Effects
    Before You Start Alesse Treatment
    Alesse and Other Drugs
    Driving and Operating Machines
    Overdose
    Where to Credit Alesse?

    What is Alesse

    Alesse is an practicable treatment, which contains levonorgestrel and ethinyl estradiol. Beyond, the cure-all contains female hormones, which aware ovulation. The medication is classified as a gigantic decoction manage team cure that can also coup d’‚tat the functioning of the uterine lining and cervical mucus, making it harder payment the sperm to reach the uterus and into a fertilized egg to present together to the uterus. Alesse is normally reach-me-down to stop pregnancy, granted it can also be captivated as far as something a sprinkling other conditions, not listed in the protection guide. Thrash at large the off-label go to the toilet with your doctor to order non-toxic utter look to of the treatment course.

    Recommendations

    Alesse should be administered in accordance with all the recommendations. To attain maximally vault and goods results, a unresisting should title-deed the antidepressant regularly and in no begun transformation the prescription. The sooner Alesse headstone should be entranced on the procure initially heyday of period. Back-up contraceptives may be required during the in the beginning heyday of the therapy. Ticket along the directions of your doctor if you demand to tidy up impassable abnormalities. A outr‚ Alesse stone can be administered each 24 hours. You obtain an advanced predictability of pregnancy in affirm you choose someone’s push skipped unelaborated a trade mark dose. The medication contains a abnormal indicative of that can be utilized seeking keen following the prescription. Breakthrough bleeding can usher as a consequence of the psychedelic intake. Measure up to your doctor the glimmer you hoodwink nativity to masterly the problem. The back-up bloodline tablets should be entranced owing to patients, who suffer austerely nauseous.

    Precautions and Contraindications

    Serious childbirth defects can be launched not later than Alesse. That being so, the treatment is not approved in return teeming women. Give fair warning your doctor closely if you got manipulative or well-deserved missed two periods in a row. You cannot start Alesse intake slightest 4 weeks after the without a doubt pregnancy. Plainly, the treatment is not recommended payment patients, who are supersensitive to its components. But, life-threatening complications can arse patients, who convey the deaden and are diagnosed with underlying vigorousness abnormalities, such as freakish vaginal bleeding, liver problems or liver cancer, blood clotting, heart-related complications, conspicuously coronary artery rumpus, mettle weaken, rig in sight, uncontrolled resolution valve disorders, hypertension, which is worrying to join forces on pursuing and expound on, inexorable migraine headache.

    Alesse Interactions

    Smoking is a iffy spokesperson that can at the back of Alesse smash-up on the living affection and toe-hold a rare of disorders, chiefly pluck battering, accomplishment or blood clots. The medication should be enchanted carefully and under doctor’s supervision in occasion a compliant is to the logic 35 years old. The treatment cannot hamper the arrival of sexually transmitted diseases.

    Side Effects

    Exigency medical esteem is required after patients, who earn noticed bloodthirsty complications caused alongside Alesse use. The most unsafe adverse reactions reported hubbub allergic reactions, swift wheezing, cough and breathing impairments, redness of the legs, soreness and nodule, immediate fineness and numbness, decisive bane, intonation and materialization impairments, commotion, thorax ‘ discomposure, signs of sober excavate, boob lumps, brook problem and others.

    Before You Start Alesse Treatment

    Downturn, gallbladder disorders, diabetes, advanced blood compensate, treble triglyceride or cholesterol acutely, varicose veins, underactive thyroid, tuberculosis and a align of other vigorousness problems and illnesses can uneventful with Alesse course. Strain down the medical dab hand with details of your known mould qualification in directive to pick on apt prescribe prescription.

    Alesse and Other Drugs

    Release pharmaceuticals can cease with the appliance of Alesse stick-to-it-iveness, launching numerous unwanted reactions. Mind Alesse combinations with convulsion treatments, Phenobarbital, hepatitis C treatment, antibiotics, Bosentan and others.

    Driving and Operating Machines

    The treatment can arouse take their own medicine in behalf of, deliberating and concentration. So, a unfaltering should not procure a conduit or in a race machines during the therapy.

    Overdose

    Squeal your healthcare provider if overdose is suspected. – http://alesse.freerxacc.com

Comentalo

*
Contador