Firmware
The firmware supplied by 1&1 (download in their 'DSL drivers+downloads' section) can be extracted with wine (they only provide an exe file).
You will then have a file called se515*, which you are supposed to send to the router. That's what you don't do :>
At offset 256 (0x100) you will find a compressed ROM image. You can get the exact size for dd from the superblock (modify the chkfs).
Somehow, I wasnt able to extract the cramfs yet, because it is big endian and my sparc doesn't run linux (.. and sol doesnt understand cramfs ;)
What I'm trying to do at the moment is to extract it with the 'chkfs' utility, because it already provides big2little macros in its latest version. You find this at
sourceforce - be sure to get the CVS version.
At the moment I am too lazy to fix my code. the CRC doesnt calculate correctly and my pointers get fcked.
XXX TODO: get chkfs to work with big endian
Shell
yes - the router provides you a perfect shell
what you have to do to get a r00tshell is
telnet <router-ip>
log in with 'admin' and your chosen password
type 'sh'
and you'll have a shell, where you can do lots of things
> sh
BusyBox? v0.60.4 (2004.03.15-06:10+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
#
on the other hand, many really important things are missing: 'ln, grep, cp, ...'
most things can be done with 'echo' and 'cat' tho.
what i couldnt do yet is to have a real network connection for uploading programs. let me know if you can do this.
another thing which might be really interesting would be to mount a filesystem from the network.
the available filesystems are
# cat /proc/filesystems
nodev rootfs
nodev bdev
nodev proc
nodev sockfs
nodev tmpfs
nodev shm
nodev pipefs
cramfs
If you find a way of mounting some remote filesystem, let me know :-)
Uploading files with telnet and echo does _not_ work, by the way. if you paste some hundreds of lines into the shell, the router will hang and you have to reboot it.
Shell documentation
can be found at USR, which uses quite the same shell on their DSL routers:
http://www.usr.com/support/9105/9105-files/cli_reference.html
Compiling your own binaries
can be done with the sources and binaries USR provides you at
http://www.usr.com/support/s-gpl-code.asp
you need
the build-environment is well described.
The only problem is that you can't get the compiled files onto the box (yet) :-)
Physically disassemble
I haven't done that yet, but the case is just fixed with four normal philips screws, so I might do it some time to supply you with photos.
Other resources with useful information
||