ZTE F660 new

1. Open the browser http: // 192.168.1.1/web_shell_assist.gch
2. Enter sendcmd 1 DB p UserInfo (note the space and case). Explanation: view the username and password. The default value is telecomadmin/telecomadmin + number.
3. Enter sendcmd 1 DB set UserInfo 0 Username admin (note space and Case sensitivity). Explanation: Change the Username to admin.
4. Enter sendcmd 1 DB set UserInfo 0 Password admin (note the space and case). Explanation: change the Password to admin.
5. Input sendcmd 1 DB save (note the space and case) Explanation: Modify and save

2. Modify remote control to prevent remote modification of your super account and restrict some functions
1. Open the browser http: // 192.168.1.1/web_shell_assist.gch
2. Enter sendcmd 1 DB p MgtServer (note space and Case sensitivity) Explanation: Check the current remote control of China Telecom.
3. Enter sendcmd 1 DB set MgtServer 0 URL http: // 123.0.0.1 (note space and Case sensitivity) explanation: the simple method is to change the server URL
4. Enter sendcmd 1 DB set MgtServer 0 Tr069Enable 0 (note space and Case sensitivity). Explanation: Disable TR069 remote control.
5. Input sendcmd 1 DB save (note the space and case) Explanation: Modify and save

3. Enable automatic dialing for Optical cats

-- Report the cycle to off. It is said that this is the computer that can control your device. Turning it off cannot be controlled,
-- Click Network
-- Broadband settings

-- The connection name has a drop-down menu and click to query internet_ B _vid (because I have changed it four or five times, it starts with 8, and you may start with 2) search for the vlan id in it. My vlan id is 1024, and write it down. The best way is to copy the content of this page and stick it to the notepad to save it, you can also save a screenshot for future use!
-- Create a connection here
-- Select pppoe as the dialing mode.
-- Basically, all ports except the digital TV port (I use lan2). Otherwise, you will not be able to watch the TV. You can choose all without a digital TV. You don't know which one is the digital TV port, and you can find it on the right of the camera.

-- The vlan id is the one you remember.
-- The user name and password are your broadband user name and password
-- The automatic dial-up and route functions have been created at the end of the Creation. This is because your network will be disconnected and you don't need to worry about it. You will be connected later!

-- The original internet_ B _vid can be deleted. If it is not deleted, it is said that the time will be doubled, that is, you will be recorded for two hours in the last hour, and I have not deleted it, because I have a monthly subscription!
Create a WAN connection and check lan1, 3, 4, and ssid1, lan2, and ssid2. Because they are bound to ITV, they cannot be checked. Otherwise, ITV cannot be viewed. Fill in the username and password box
Click Create or save the Internet account and password.

4. sendcmd 1 dB set ftpservercfg 0 ftpenable 0

5. sendcmd 1 dB set dhcpshostcfg 0 dnsservers1 the DNS address you want to change to 1

China Telecom DNS 61.128.128.68 61.128.192.68

Http: // 192.168.1.1/hidden_version_switch.gch Switch configuration file

===:
1. xml must be in plain text. If there is no plaintext, only one copy of the configuration can be lost.
2. tr69 remote control must be removed because the restriction will be added again to invalidate the attack. The simplest way is to remove the server URL:
For example, http://devacs.edatahome... That, changed to http: // 127.0.0.1
3. The original MaxUser is the control item of the PPPoE proxy, which is irrelevant.

=== Method of cracking:
Use UltraEdit or EditPlus to search for the CltLmt character. This may contain nine IGD. CltLmt 1-9 segments, representing different types of Internet terminals, the last of which is,
IGD. CltLmt9 indicates all others. Observe the project under each IGD. CltLmt. The Enable value indicates whether to Enable the limit of this type. The Max value is the limit. So
You only need to change Enable to 0 or Max to 800. Generally, the number under IGD. CltLmt9 is changed. For example:

<Tbl name = "CltLmt" RowCount = "9">
<Row No = "8">
<DM name = "ViewName" val = "IGD. CltLmt9"/>
<DM name = "Enable" val = "1"/> ----> change to 0 to remove the restriction.
<DM name = "Type" val = "8"/> ----> Type 8, indicating all other Internet terminals
<DM name = "Max" Val = "4"/> ----> is the maximum number.
</Row>
</TBL>

In addition, if no cltlmt field exists in the XML file, the default limit is 4, which must be added. Cltlmt guess the English meaning is client limit, client limit,
Clear.

Rg200o rg201o is very simple. After logging on to the webpage with a super-Password, enter the following URL, and then everyone will know:

Http: // 192.168.1.1/mwbcfg.html

Add some useful other modification items:

1. Search for "userif" to extend the protection for webpage logon timeout

<TBL name = "userif" rowcount = "1">
<Row No = "0">
<DM name = "timeout" Val = "5"/> -----> Protection for webpage logon timeout. The default value is 5 minutes. Change it to 30, saving you a short time...
<DM name = "language" Val = "2"/>
</Row>

2. Search for "userinfo" and modify the Webpage Administrator password.

<TBL name = "userinfo" rowcount = "4">
<Row No = "0">
<DM name = "ViewName" val = "IGD. UserIF. UserInfo1"/>
<DM name = "Type" val = "1"/>
<DM name = "Enable" val = "1"/>
<DM name = "Username" val = "telecomadmin"/> ----> change it to your favorite one !!
<DM name = "Password" val = "nE7jA % 5 m"/> -----> change to easy to remember ....
<DM name = "Right" val = "1"/>
</Row>

3. Search for "telnet" and modify the telnet configuration.

<Tbl name = "TelnetCfg" RowCount = "1">
<Row No = "0">
<DM name = "TS_Enable" val = "1"/>
<DM name = "Wan_Enable" val = "1"/> ----------> change to 0 to prevent Internet access
<DM name = "Lan_Enable" val = "0"/>
<DM name = "TS_Port" val = "23"/> ----------> Port
<DM name = "TS_UName" val = "root"/>
<DM name = "TS_UPwd" val = "root"/> -------> modify the default password to prevent attacks
<DM name = "Max_Con_Num" val = "2"/> ------ increase the maximum number of connections in telnet to prevent locking
<DM name = "ProcType" val = "0"/>
</Row>

4. Search for "ftpserver", enable ftp, and discard the USB flash drive, which greatly facilitates configuration file modification:

<Tbl name = "FTPServerCfg" RowCount = "1">
<Row No = "0">
<DM name = "FtpEnable" val = "0"/> ----> Change 1 to enable the ftp server.
<DM name = "ServerPort" val = "21"/>
<DM name = "WanIfEnable" val = "0"/>
<DM name = "FtpAnon" val = "0"/>
<DM name = "WanID0" val = ""/>
<DM name = "WanID1" val = ""/>
<DM name = "WanID2" val = ""/>
<DM name = "WanID3" val = ""/>
<DM name = "WanID4" val = ""/>
<DM name = "WanID5" val = ""/>
<DM name = "WanID6" val = ""/>
<DM name = "WanID7" val = ""/>
<DM name = "MaxClient" val = "5"/> ---> increase the maximum number of connections.
<DM name = "MaxPerIp" val = "5"/> ---> increase the maximum number of Single-ip connections.
<DM name = "MaxRate" val = "250000"/> ---> increase the maximum transmission speed.
</Row>
</Tbl>
<Tbl name = "FTPUser" RowCount = "8">
<Row No = "0">
<DM name = "ViewName" val = "IGD. FTPUSER0"/>
<DM name = "Username" val = "admin"/> ----> modify the default ftp user group and password
<DM name = "Password" val = "admin"/>
<DM name = "location" Val = "/mnt"/> -----> change to/to access the entire file system.
<DM name = "userright" Val = "3"/>
</Row>

 

The article from [broadband technology network] chinadsl. Net: http://www.chinadsl.net/thread-77147-1-2.html