Posts

Backdoor and root shell on ZTE MF286

ZTE MF286 has built-in factory backdoor allowing root shell access on embedded Linux running inside router. However since we don't know RSA-2048 private key used for encrypting device specific password we're not able to use this. Which doesn't mean we won't have other means to gain root shell.

Locking custom LTE bands on ZTE MF286

My ZTE MF286 is running DNA firmware version B04. It's somewhat limited in LTE band selection, but that can easily be worked around with curl.

Inside ZTE MF286 router

ZTE MF286 4G router is built around Qualcomm QCA9563 soc with 802.11bgn, QCA9882 802.11ac wlan, QCA8337 gigabit switch and MDM9230 LTE chip. There's also tempting serial port knowing all components used are already supported by LEDE (that has replaced OpenWrt). Photos here .

Inside Huawei B315s-22 4G router

Huawei B315s-22 contains Huawei HiSilicon 6361 SoC, Realteak Ethernet switch and Broadcom WLAN. Not much to see, but some photos here .

Linux SNAT with per-connection source address from IP pool

When doing NAT with pool of addresses to choose from (instead of masquerading) Linux insists on always using same IP from pool for particular source IP. Often this is preferred, but not always. To workaround we need to patch kernel a bit.

Windows 10 audio playback fails over bluetooth

Quick google search reveals hundreds of posts having exactly same problem - pairing with bluetooth audio device works but there's no audio. Hundreds of posts with incorrect instructions to fix problem. You do NOT need to uninstall random devices, restart service etc. All you need is correct Bluetooth drivers - drivers NOT available on Windows Update.

Vectorworks 2016 SP4 crashes on startup with Intel HD graphics

Vectorworks 2016 SP4 keeps crashing on startup with fault in module IG75ICD64.DLL when running on Lenovo W540p laptop with Nvidia Quadro 1100M. This laptop has also built-in Intel graphics and troublesome DLL is part of Intel driver package.