Thanks for the great info here. Could root device FAST5360 (Sunrise Internet Box) by using the $.xmo.setValuesTree approach, poweruser can be manipulated (Software Version: SG4D10001350)
$.xmo.setValuesTree("ACCESS_ENABLE_ALL", "Device/UserAccounts/Users/User[@uid='5']/RemoteAccesses/RemoteAccess[@uid='1']/LANRestriction");
$.xmo.getValuesTree("Device/UserAccounts/Users/User[@uid='5']/RemoteAccesses/RemoteAccess[@uid='1']/HostRestrictions/HostRestriction[@uid='2']/IPAddress");
(will return 10.0.0.0, next set to your home ip adress range)
$.xmo.setValuesTree("192.0.0.0", "Device/UserAccounts/Users/User[@uid='5']/RemoteAccesses/RemoteAccess[@uid='1']/HostRestrictions/HostRestriction[@uid='2']/IPAddress");
after reboot: port 22 is open
adjust passwords:
$.xmo.getValuesTree("Device/UserAccounts/Users/User[@uid='5']/Password");
$.xmo.getValuesTree("Device/UserAccounts/Users/User[@uid='5']/ClearTextPassword");
(return current values)
$.xmo.setValuesTree("8213d162ea32a3fcfec2aae5538c48e5","Device/UserAccounts/Users/User[@uid='5']/Password");
$.xmo.setValuesTree("assist","Device/UserAccounts/Users/User[@uid='5']/ClearTextPassword");
The changed password can be immediately used (no reboot required). Is the data in the xmo object directly written to passwd?
ssh poweruser@.......
password: assist
find SIP credentials in /var/cfg.xml, look for <SIP><AuthUserName>
To gain full access: su with pw root
So far so good, I want to prevent firmware updates. Is this the section to work on?
<TR69InternalData>
<Settings>
<Interface>Device/IP/Interfaces/Interface[IP_DATA]</Interface>
<SslCpeKeyPath>/opt/conf/cpe.pem</SslCpeKeyPath>
<XmoAcsUsername>acs</XmoAcsUsername>
<XmoAcsPassword>acs</XmoAcsPassword>
<XmoAcsNamespaces element-count="2" new-id="3">
<XmoAcsNamespace uid="1">
<Name>tr181</Name>
<URL>
http://sagemcom.com/tr181-data</URL>
</XmoAcsNamespace>
<XmoAcsNamespace uid="2">
<Name>tr181sunrise</Name>
<URL>
http://sagemcom.com/tr181sunrise-data</URL>
</XmoAcsNamespace>
</XmoAcsNamespaces>
<ForcedInformParameters new-id="2"/>
</Settings>
No clue about xmo-client. What is the correct to xmo-client command to tweak let's say the url?
Thanks!