|
I have SSH access (user: sreader).
The old exploit:
/ebrmain/bin/netagent btservice "\"|| /bin/sh ..."
fails with 'command not recognized'.
It seems netagent in firmware 2.1.x has been patched.
Question: Is there a working 'Sudo' or 'Rootsh' package for this specific firmware version?
Or a known way to trigger a root shell via extensions.cfg or by replacing a system binary in /ebrmain/bin/? I already have BlueZ 3.36 tools ready, just need the # permissions to run hidd."
|