Code Evangelism

Hacking the Sapido gr-1102

Posted by admin - 30/05/10 at 05:05:30 pm

I bought a sapido gr-1102 because I figured hey, its small, runs linux, wireless n, can be powered from usb and it has 2 usb ports.

Initially I plugged it in, plugged in a mobile broadband dongle. It detected it, I set it up to dial #99 and after a minute I was connected to the web through this little travel 3g router.

I was happy.

In an effort to get root access to the device I grabbed the most recent firmware off of Sapido’s site. Noticed some gzip magic in the file and extracted the rootfs.

I knew there was a hidden page so I searched my hex editor for the terms command and I had a hit for System command.

The hidden page was/is called obama.asp . Interesting….

I fired up telnetd with telnetd -l /bin/sh and telnet’ed to the device. I had root access….

I was able to get my cellphone to work, with some hackery.
a vid and pid for the usb device are written to a file: /var/HSDPACARD

I found this out by reading the /bin/HSDPA.sh script.

Of course my cellphone is detected as a generic ttyACM device , so a quick search of the supported vids/pids gave me 0fa1 and 6010 for ttyACM0.

I wrote a little script that just echos this to the correct place.

echo “Vendor=0fa1 ProdID=6010″> /var/HSDPACARD

And now the cellphones connection can be shared.

Openwrt is next. I have a kernel booting, Just working out the rootfs now..

Stay tuned.