9 Commits

Author	SHA1	Message	Date
Markus Unterwaditzer	5e4174c9f3	address review feedback	2025-11-25 13:52:07 -08:00
Markus Unterwaditzer	5fbc540fa0	Implement basic telnet shell for both orbic and tplink	2025-11-25 13:52:07 -08:00
Markus Unterwaditzer	3b44234ae1	implement installer as library and use it in gui	2025-11-18 21:05:22 +01:00
Markus Unterwaditzer	ea5aa6cee2	Make orbic-network the default, update documentation, add deprecation warnings	2025-11-04 11:22:43 -08:00
Cooper Quintin	e60035f744	use port 24	2025-10-08 10:46:41 -07:00
Markus Unterwaditzer	1a80a0576c	Add --admin-password to orbic-network installer, update docs ... Also add some more debug-logging to telnet_send_file since it appears to be janky on my device. see #599	2025-10-08 10:46:41 -07:00
Markus Unterwaditzer	9d92ab3c01	Simplify remounting procedure	2025-08-19 17:36:10 -07:00
Markus Unterwaditzer	cf254b66ff	Address review comments and update wingtech docs	2025-08-19 17:36:10 -07:00
Markus Unterwaditzer	9d736f5bf0	Add a orbic network installer ... There is a shell injection vulnerability after all, so we can just launch a remote shell, tplink-style. Except there's no telnetd on this device so we need to use netcat. This was found in the goahead binary on the device using Ghidra. The decompiled code for this endpoint looks like this: ```c void FUN_0003c614(int param_1) { int iVar1; undefined4 uVar2; int local_160; undefined1 auStack_15c [64]; char acStack_11c [256]; int local_1c; local_1c = __stack_chk_guard; if (param_1 == 0) { error("input parameter is NULL!"); uVar2 = 0x66; goto LAB_0003c808; } iVar1 = websGetJsonItemValue(param_1,"password",10,auStack_15c,0x40); if (iVar1 != 0) { iVar1 = get_log_level_something(); if (1 < iVar1) { some_logging_func(2,"modifying root password(%s)...",auStack_15c); } iVar1 = sprintf(acStack_11c,"echo root:\"%s\"|chpasswd",auStack_15c); acStack_11c[iVar1] = '\0'; system(acStack_11c); } ``` Usage is `./installer orbic-network`, as an alternative to `./installer orbic`. It should work on Windows without any kind of drivers. This installer also works on the Moxee device.	2025-08-19 17:36:10 -07:00