4

Backstory: I have a Huawei HG8245 router in my house and I want to change the default username/password. I've tried following this guide but the config file always gets reset. My ISP isn't helping either so I'm looking for other ways to accomplish this. The router has telnet access so this seems like a way to change the credentials.

The first shell I gain access to looks like this:

WAP>

Pressing "?" gives me a list of available commands which I've pasted here, the two interesting ones are "su" and "shell". I can't seem to get su access, even after logging in as root (challenge password prompt, and then nothing happens), but shell gives me a proper linux shell.

WAP>shell

BusyBox v1.18.4 (2017-12-26 17:06:34 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

WAP(Dopra Linux) #

Now this is where it gets interesting, BusyBox is installed, but the help command doesn't actually work.

WAP(Dopra Linux) # help
ERROR::Command is not existed

Hitting "?" again gives me another list of available commands which I've pasted here. They are pretty limited but I have access to ls and I can see that /bin actually has a lot of classic linux stuff in it, but I can't seem to run any of it, even busybox. It just throws the cheeky "Command is not existed" error message.

My question is: How can I access these commands (preferably cat and echo)?

  • @RuiFRibeiro I don't see how this is offtopic, I'm asking a straightforward question about an underlying *NIX system in a device, which is the second example in the accepted questions. It's neither vague nor does it requre a whole book to answer. It also doesn't promote random discussion. I added the extra details to add the context to the it, but I've seen very similar ones asked and answered on this site about other botched linux versions. – DzeriMNE Sep 6 '18 at 1:00
  • @RuiFRibeiro I've rephrased the question at the end, but it was, and still is the only question in the whole post. Without the details I'm sure it would get flagged as too vague. As for asking for learning materials, I'm not specifically. Besides, every single answer on this entire website could be considered "learning material" and most of them contain steps in form of a tutorial. It is not a hacking request. Plenty of accepted questions ask for some form of privilege escalation (I don't even see this as one, just a poorly made system I'm trying to fix) – DzeriMNE Sep 6 '18 at 1:17
  • /bin/echo hello – Rui F Ribeiro Sep 6 '18 at 1:26
  • @RuiFRibeiro "Command is not existed" – DzeriMNE Sep 6 '18 at 1:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.