Zyxel LTE 7460
Misc info
/proc/cpuinfo
processor : 0 model name : ARMv7 Processor rev 3 (v7l) BogoMIPS : 38.40 Features : swp half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva idivt CPU implementer : 0x41 CPU architecture: 7 CPU variant : 0x0 CPU part : 0xc07 CPU revision : 3 Hardware : Qualcomm MDM 9630 (Flattened Device Tree) Revision : 0000 Serial : 0000000000000000
/proc/version
Linux version 3.10.0 (yyhung@D1R330BM1) (gcc version 6.2.0 (GCC) ) #1 PREEMPT Wed Dec 13 17:22:54 CST 2017
> lsmod
nf_nat_rtsp 3574 0 - Live 0xbf027000 (O) nf_conntrack_rtsp 5404 1 nf_nat_rtsp, Live 0xbf00f000 (O) shortcut_fe_cm 7011 0 - Live 0xbf024000 (O) shortcut_fe_ipv6 55521 1 shortcut_fe_cm, Live 0xbf012000 (O) shortcut_fe 54067 1 shortcut_fe_cm, Live 0xbf000000 (O)
modinfo nf_nat_rtsp filename: kernel/drivers/net/nf_nat_rtsp.ko license: GPL author: Tom Marshalldescription: RTSP network address translation module depends: nf_conntrack_rtsp vermagic: 3.10.0 preempt mod_unload ARMv7 parm: destaction:Action for destination parameter (auto/strip/none) parm: stunaddr:Address for detecting STUN modinfo nf_conntrack_rtsp filename: kernel/drivers/net/nf_conntrack_rtsp.ko license: GPL author: Tom Marshall description: RTSP connection tracking module depends: vermagic: 3.10.0 preempt mod_unload ARMv7 parm: setup_timeout:timeout on for unestablished data channels parm: max_outstanding:max number of outstanding SETUP requests per RTSP session parm: ports:port numbers of RTSP servers modinfo shortcut_fe_cm filename: extra/shortcut-fe-cm.ko license: Dual BSD/GPL author: Qualcomm Atheros Inc. description: Shortcut Forwarding Engine - Connection Manager depends: shortcut-fe-ipv6,shortcut-fe vermagic: 3.10.0 preempt mod_unload ARMv7 modinfo shortcut_fe_ipv6 filename: extra/shortcut-fe-ipv6.ko license: Dual BSD/GPL author: Qualcomm Atheros Inc. description: Shortcut Forwarding Engine - IPv6 support depends: vermagic: 3.10.0 preempt mod_unload ARMv7 modinfo shortcut_fe filename: extra/shortcut-fe.ko license: Dual BSD/GPL author: Qualcomm Atheros Inc. description: Shortcut Forwarding Engine - IPv4 edition depends: vermagic: 3.10.0 preempt mod_unload ARMv7
> strings /www/pages/cgi-bin/gui.cgi
...
UNIX domain socket create failed (errno=%d)
/dev/shm/cgi-2-sys
Content-type: text/html
{ "action": "get_translated_str", "args": { "msgid": "%s"}}
"msgstr":"
...
/dev/shm/cgi-2-sys looks interesting, right?
> /dev/shm# ls -al
srw-rw-rw- 1 admin root 0 Nov 17 17:19 api-2-mald srw-rw-rw- 1 admin root 0 Nov 17 17:19 cgi-2-sys srwxr-xr-x 1 admin root 0 Nov 17 17:19 json-server -rw-r--r-- 1 admin root 4797 Nov 20 19:41 libmal.log -rw-r--r-- 1 admin root 1048609 Nov 20 19:41 libmal.log.1 -rw-r--r-- 1 admin root 176146 Nov 20 19:41 mald.log -rw-r--r-- 1 admin root 1048655 Nov 20 19:41 mald.log.1 -rw-r--r-- 1 admin root 5 Nov 17 17:19 mald_pid -rw-r--r-- 1 admin root 792109 Nov 20 19:41 malmanager.log -rw-r--r-- 1 admin root 1048639 Nov 20 19:28 malmanager.log.1 -rw-r--r-- 1 admin root 946 Nov 20 19:41 tr69client.log -rw-r--r-- 1 admin root 5 Nov 20 19:41 tragent.pid
> tail -f /dev/shm/malmanager.log | grep "LTE signal strength:"
2018/11/20 19:41:13, pid: 1309, LTE signal strength: -54-dbm -81-rsrp 2018/11/20 19:41:13, pid: 1309, LTE signal strength: -7-rsrq 15-rssnr -1-cqi 2018/11/20 19:41:15, pid: 1309, LTE signal strength: -54-dbm -82-rsrp 2018/11/20 19:41:15, pid: 1309, LTE signal strength: -9-rsrq 14-rssnr -1-cqi 2018/11/20 19:41:17, pid: 1309, LTE signal strength: -54-dbm -81-rsrp 2018/11/20 19:41:17, pid: 1309, LTE signal strength: -7-rsrq 9-rssnr -1-cqi 2018/11/20 19:41:22, pid: 1309, LTE signal strength: -54-dbm -82-rsrp 2018/11/20 19:41:22, pid: 1309, LTE signal strength: -7-rsrq 12-rssnr -1-cqi 2018/11/20 19:41:26, pid: 1309, LTE signal strength: -54-dbm -82-rsrp 2018/11/20 19:41:26, pid: 1309, LTE signal strength: -9-rsrq 7-rssnr -1-cqi
Other interesting shi...tuff:
/data/user/mm_conf/malmanager.cfg Is this my ~complete configuration? Like plain text WWAN_PIN and hashed password.