Brute forcing the pasword will not be needing, because a netcat can be installed, and even busybox incoporates one.
What is needed is a way to install a file in /etc/rc.0 or in ~/ or similar points, in order to execute the netcat or arbitrary scripts. Any arbitrary script execution should work, and also to enable the save as... window in any application would work.
I do not know how to do it. An interesting list of mozilla bugs is here
http://searchsecurity.techtarget.com...180286,00.html
but I do not know if they apply to the modifyed minimo browser we run.
Any other starting points should be appreciated.
Users of 2.4 can try to upgrade to 2.5 keeping control along a delicate process, which I failed to complete sucessfully (but I describe in a separate thread).