Guys bago ko i share ito credit muna...
Cramf Sy para sa Backdoor
Pedik para sa Telnet (kay sir pedik via Iperf)
Share din kayo kasi hanggang ngayon disconnected padin modem ko sa wimax pero LTE connected na. Tulungan tayo!!!
At importante hit
http://i.imgur.com/As4Vy9M.png Button kasi may mapupulutan kayo dito galing sakin.
1st GUI Access muna syempre...
(Kaso limited talaga access ng Power User at Operator) Alam nyo na ito diba. Wait lang antay mo yung trick ko nasa baba!!!
Option 1 - Backdoor (Alam nyo na ito diba)
Alamin ang available na user gamit ito
Default result
Successfully,
u878mJAskqMd,
Admin,
user,enable,enable,enable,/www/power_user,/www/operator_user,/www/guest_user,
Delete a user (Palitan ang u878mJAskqMd ng available na nasa taas kung gusto Operator or User Access)
To execute command/view result
Add a user (wag kalimutan palitan symbianize)
To execute command/view result
Check mo kung kumagat dapat napalitan na yung user
THEN LOG IN NA! Wala po password yan kasi galing sa backdoor. May access na kayo sa Power User, Operator or User.
Option 2 - Open TELNET pwede nyo paltan port kayo bahala. Eto po galing sakin na discover ko lang. Mas mabilis di na dadaan sa Iperf.
To execute command/view result
NOW Open Telnet (putty or via cmd) Note wala po ito challenge question gaya sa backdoor ni Cramf Sy
Eto commands
deluser u878mJAskqMd
adduser symbianize
Now enter password. Pwede nyo enter lang para blank password. Then Login sa GUI.
Ngayon nasa Telnet kayo INGAT lang!!!! Kung Advanced User ka alam mo na.
2nd Missing Admin Access...
Ako din po naka diskubre nito. Dito po galing mga SS ko sa mga post ko dati...
CHANGE FREQ, PEM/KEY, APN, SMS INBOX ETC.
Requirement:
1. Firefox
2.
Cookies Manager+ - Click mo nalang ito para di ka mahirapan
3. Common sense
Procedure:
1. Login sa GUI 192.168.254.254 - gamit ang na create mo na user sa taas (Power User, Operator or User) kahit ano wala problema
2. Open About page or kahit anong page -
Important para sa cookies
2. Open Cookies Manager (Search mo 192.168.254.254 para wala iba lumabas)
3. Double Click
Page (Hindi SID or Userlevel)
4. Palitan mo yung nasa Content ng kahit ano missing pages
5. Reload or Refresh nyo si GUI or Firefox
View attachment 1050463
Eto yung sample ng missing pages kasi block ni bibo access mo dyan e.
1. control_panel_certificate.asp - PEM/KEY upload
2. lte_apn.asp - APN para sa LTE
3. lte_multiple_apn.asp - Multiple APN
4. lte_cell_lock.asp - FREQ scanner daw
5. lte_plmn_select.asp - ETO ata para maOpenLine sa Smart di ko sure.
6. mobile_sms_inbox.asp - Send SMS Inbox
7. personalize_password.asp - Change Username/Password via GUI
8. wimax_auth.asp - Wimax Authentication (lagayan ng Usernmae/Pass/Anonymous ID)
Clue sa missing pages 0=off 1=on
http://192.168.254.254/multy_user.h
http://192.168.254.254/operator_user
http://192.168.254.254/power_user
Sample Useful Telnet commands
ifconfig eth2 down
cmscfg -s -n supplicant_anonymous_id_string -v TAGAGLOBEAKO
cmscfg -s -n supplicant_phase1 -v EAP-TLS
cmscfg -s -n supplicant_realm_en -v enable
cmscfg -s -n supplicant_realm -v globelines.com.ph
cmscfg -s -n supplicant_username -v
[email protected]
cmscfg -s -n supplicant_password -v 2008AlaMonaTOdiBa
ifconfig eth2 down hw ether TA:GA:GL:OB:EA:KO
ifconfig eth2 up
fw_setenv wmxaddr TA:GA:GL:OB:EA:KO
fw_setenv lanaddr TA:GA:GL:OB:EA:KO
Change Wimax FREQ (Diskarte nyo na pwede 0-19) Witribe na FREQ po yan.
cmscfg -s -n wimax_channel_plan_Id_
7_enable -v 1
cmscfg -s -n wimax_channel_plan_first_freq_
7 -v 2570000
cmscfg -s -n wimax_channel_plan_last_freq_
7 -v 2570000
cmscfg -s -n wimax_channel_plan_step_
7 -v 5000
cmscfg -s -n wimax_channel_plan_bw_
7 -v 5000
MORE SS
View attachment 1050458
View attachment 1050460
View attachment 1050461
View attachment 1050462
QUESTIONS:
1. mga tol paano makikita yung mac ng od ko? Thanks
ano ba yung command n2 TS. na sncfg commit ? reboot command gumana . 
for sharing.
ayos na ayos hehe
