Custom firmware version strings used by ISP in addition to the above: unknown.

Please fill as many available info about each firmware versions you have ever heard about for this board. Sed -i '1s//bin/restricted_shell//bin/ash/' /etc/passwd

Standard instructions for enabling root logon work, except note that root's default shell is now /bin/restricted_shell instead of /bin/false so the sed command has to reflect that, e.g. If it works, a reverse shell connects in a few seconds. In the IPv4 section, click the enable button.Login to the router's web interface, go to WAN Services -> DynDNS tab.set the script to be the netcat reverse shell, including full path to netcat:.change the DDNS client to obtain its IP address from a script instead of from the network:.logon to the router by SSH as engineer using the admin password from the sticker on the bottom of the router.With engineer SSH access, the following approach works: I had a look at AutoFlashGUI but this model is not explicitly supported (unsure if the below is the same DDNS exploit it uses, or a different one). Using the engineer logon by SSH to change the WPS button handler is blocked now. The Ping and DDNS web interface validation holes seem to be closed on this version.

Mainly raising this issue to share the root strategy - not very interested in firmware flashing. Say something more about the adopted strategy here

No, as far as I know it has never been rooted.

Yes, following another different strategy.

Yes, by using a root strategy listed in the wiki.

Commercial name from the ISP: None known.ĭid anybody ever manage to get root on that device already?.

My gateway is currently running firmware version 19.4 in UK.

Technicolor router support