Skip to content

UZ801 4G/LTE usb modem for pentesting based on Qualcomm msm8916 debian bookworm.

Notifications You must be signed in to change notification settings

xiv3r/uz801-usb-pentest

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

66 Commits
 
 
 
 

Repository files navigation

$${\color{cyan}Openstick- UZ801- 4G-USB Debian- Bookworm}$$


$${\color{cyan}Requirements}$$

$${\color{cyan}Download- File}$$

Termux

apt update && apt upgrade -y && apt install axel tar -y
axel -o https://github.com/xiv3r/uz801-usb-pentest/releases/download/file/debian_uz801_v3.tar.xz
tar -xvf debian_uz801_v3.tar.xz
cd debian_uz801_v3

$${\color{cyan}Installation}$$

$${\color{cyan}Install- Logs}$$

Install the ADB and FASTBOOT in termux

curl -s https://raw.githubusercontent.com/offici5l/termux-adb-fastboot/main/install | bash

Connect the UZ801 usb modem to the OTG

Power-On the USB MODEM through the Android OTG connection

Connect to the WiFi 4G-UFI-1234

Open the gateway to unlock the adb (it will reboot)

http://192.168.100.1/usbdebug.html

After the boot

Open the termux terminal

List active device

adb devices

Enable fastboot mode

adb reboot bootloader

List fastboot active device

fastboot devices

Flash the Firmware

cd debian_uz801_v3
./flash.sh

$${\color{cyan}SSH- Access}$$

for AP 4G-UFI-XX

For RNDIS USB

User/Root Password:1

$${\color{cyan}Screenshot}$$

Modified by Me

$${\color{cyan}Internet- via- WIFI}$$

Internet via WiFi (disable AP mode) router USB WAN RNDIS only

SSH accessible through router USB WAN RNDIS port ssh [email protected]

sudo nmcli connection delete hotspot

Connect to a Wifi AP

sudo nmcli dev wifi connect "SSID" password "PASSWORD"

Check connection status

sudo ip address 

$${\color{cyan}Internet- via- 4G/LTE}$$

Internet via 4G (AP mode only) accessible through ssh [email protected]

Set the Provider APN

sudo nmcli connection modify lte gsm.apn <your_apn>

Activate the 4G connection

sudo nmcli connection up lte

Check the 4G connection status

sudo mmcli -m 0

Check the IP status

sudo ip address

$${\color{cyan}Update- and- Upgrade}$$

update

sudo apt update 

upgrade

sudo apt upgrade -y

Install additional tool

sudo apt install nmap -y

Check RNDIS configuration in /etc/dnsmasq.conf after upgrading dnsmasq with (Y)

Add the following if not yet configured. this will ensures that RNDIS and SSH are accessible through usb0 ssh [email protected]

dhcp-range=interface:wlan0,192.168.100.100,192.168.100.150,12h
dhcp-range=interface:usb0,192.168.200.100,192.168.200.150,12h

$${\color{cyan}Enable- USB- Ethernet}$$

Enable IP forwarding

sudo echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
sudo sysctl -p

Load RNDIS driver

sudo gt load --path /usr/local/etc/gt/templates rndis-os-desc.scheme

Unplug the 4G Modem

$${\color{cyan}Recovery}$$

Install ADB and FASTBOOT in termux if not yet installed.

curl -s https://raw.githubusercontent.com/offici5l/termux-adb-fastboot/main/install | bash

hold the reset button while powering on the 4G USB Modem through OTG and released it after 5 seconds to enable fastboot mode.

cd debian_uz801_v3
fastboot devices
fastboot erase rootfs
fastboot -S 200M flash rootfs debian/rootfs.img

$${\color{yellow}Credit}$$

Firmware and Documentation

Wim van 't Hoog

About

UZ801 4G/LTE usb modem for pentesting based on Qualcomm msm8916 debian bookworm.

Resources

Stars

Watchers

Forks

Packages

No packages published