ZTE f460 cracking and Remote Management

How to break through the limit of 5 Users:

1. Open the browser http: // 192.168.1.1/web_shell_assist.gch

2. Input sendcmd 1 dB P cltlmt (note space and Case sensitivity). Explanation: Check the current number of users.

3. Input sendcmd 1 dB set cltlmt 8 Max 9 (note space and Case sensitivity) Explanation: Modify the maximum number of users to 9. The original number is 5. You can change it to another number. We recommend that the maximum number not exceed 255.

4. Enter sendcmd 1 dB set cltlmt 8 enable 0 (note the space and Case sensitivity). Explanation: remove the restriction. This check may be available in some regions. For security reasons, we recommend that you change this value to 0.

5. Input sendcmd 1 dB save (note the space and case) Explanation: Modify and save

In addition, I reorganized other shell commands of f460.

How to obtain superpasswords:

1. Open the browser http: // 192.168.1.1/web_shell_assist.gch and enter CP tmp/db_backup_cfg.xml home/httpd

2. Use the download tool to download http: // 192.168.1.1/db_backup_cfg.xml (open the search <Ctrl + F> telecomadmin to obtain the superpassword)

You can also directly modify the superpassword:

1. Open the browser http: // 192.168.1.1/web_shell_assist.gch

2. Enter sendcmd 1 dB P userinfo (note the space and case). Explanation: Modify and save.

3. Enter sendcmd 1 dB set userinfo 0 username admin (note space and Case sensitivity). Explanation: Change the username to admin.

4. Enter sendcmd 1 dB set userinfo 0 Password (note the space and case). Explanation: change the password to password.

5. Input sendcmd 1 dB save (note the space and case) Explanation: Modify and save

Delete Telecom remote control:

1. Open the browser http: // 192.168.1.1/web_shell_assist.gch

2. Enter sendcmd 1 dB P mgtserver (note space and Case sensitivity). Explanation: Check the Current Remote Control Function of China Telecom.

3. Enter sendcmd 1 dB set mgtserver 0 URL http: // 127.0.0.1 (note the space and Case sensitivity). The simple method is to change the server URL.

4. Enter sendcmd 1 dB set mgtserver 0 tr069enable 0 (note space and Case sensitivity). Explanation: Disable TR069 remote control.

5. Input sendcmd 1 dB save (note the space and case) Explanation: Modify and save