Hacking

[Tutorial] Root PTCL Charji Wingle – Port Forwarding

Written by Dr-Hack



This tutorial will show you how to root your PTCL Charji Wingle R660 A to unlock all locked out features by the service provider in this case, PTCL.Which will also enable the most wanted Port Forwarding on PTCL Charji / EVDO devices.

Rooting PTCL Charji Wingle unlocks Features

A question we all have , what do we achieve after we root our internet device ? . Well, rooting allows you to access :-

  1. Root (Admin) access of the Charji Evo (MiFi) Device which means you can do literally anything
  2. Flash a new firmware if you get hold of one or know how to customize your own and run it
  3. Enable Port Forwarding / Virtual Servers on the device
  4. Enable NAT on Charji Evo
  5. Enable Security Tab
  6. SNMP monitoring
  7. Use Data Sims of any other network
  8. Change branding of the admin panel of the device to anything you like , do not like the PTCL logo everywhere ? well you can change it
  9. Experience
  10. Opens a door for future experimenting

Telnet into PTCL Charji Wingle

Connect to your Charji device and telnet to the router IP (generally 192.168.1.1), once prompted with login you can enter admin as Username and Password

although we were logged in but currently the above credentials are mapped to mdm9625 user account which is not part of root group. The Linux flavour being run is OpenEmbedded Linux LNX.LE.4.1-41009-9×35 which supports Qualcomm chipset as found on most PTCL Internet devices

so mdm9625 has just access to /home/admin , and that is also No Write Access, root user has no known default password so can not login through telnet in the first go now lets go ahead and root the shit of this device

[Tutorial] Root PTCL Charji Device and unlock all features

HOT:  Hash injection Attacks in a Windows Network

Enable NAT/DMZ (Port Forwarding) on PTCL Charji Device

If you reading this means you have successfully rooted your device now just ahead and unlock our favourite port forwarding,we can achieve that using two methods, I will list both

Method 1 – This method involves entering port and ip for forwarding while in the terminal

  1. Navigate to /etc/ and open mobileap_cfg.xml

  2. Edit mobileap_cfg.xml and add your local IP and the port you want external traffic to route too , you can add as many internal IPs and Ports as you wish by just copying and pasting everything starting from <PortForward> … </PortForward> and change the values which you want.you will only have VI editor to make your changes from within the terminal
  3. That’s all for this method showing how to enable Port Forwarding on PTCL Charji Devices

Method 2 – This method will enable the Security page in PTCL Charji Web interface and we will be able to do port forwarding etc from there.

  1. Telnet to 192.168.1.1 and login with your root credentials
  2. Navigate to /WEBSERVER/www/
  3. Edit menu.js
  4. Add the following code into menu.js

           [“Security”, “navi-security”, “sec_firewall.asp”,
    [
    [“Firewall”, “sec_firewall.asp”]
    ,[“NAT”, “net_nat.asp”]
    ,[“DMZ”, “net_dmz.asp”]
    ]
    ],

  5. You can consult the image below for guidance or see the complete code of menu.js
  6. Save it and Reboot, adding the above code will give you a new “Security Tab” on your Charji router web page
  7. Rest is simple (after all that is why you came here) to do Port Forwarding just go to NAT under your newly enabled Security TAB and add the local IP and port you want your external traffic of that port to route too
  8. That is it , Enjoy your Rooted PTCL EVO Device with Port Forwarding enabled.

Enable Wizard Mode on your PTCL Charji / EVO Device

Using the menu.js file you can enable the Wizard Mode option which allows you to adjust main PTCL configuration (be advised if you mess this up you may lose device connectivity). Just like the System code we added above for Wizard Tab you have to add :

[“Wizard”, “navi-wizard”, “wizard.asp”,
null
],

Or you can Copy the complete Menu.js Code

That is for all for this and thanks alot to TimeMatcher for making this post possible. If you have some more tips to make it better or want to share your experience or query drop those in the comments below.

Notes

  • This Tutorial was made using a PTCL Charji Wingle R660 A device manufactured by GadgeIT but it is same for all Qualcomm chipsets which are mostly used by PTCL. PTCL Wingle / Cloud / EVO / Charji all devices uses the same chipsets
  • GadgeIT is a strange business, while doing my PTCL Charji Cloud R600A post i tried finding them and ended up contacting one of their tech guys and strangely they have one messed up website which doesn’t even have all updated info but if you want to head over , its called Swift Biz Solutions
  • For Android OS Devices (like EVO TAB) you will need busybox to go through the rooting, that can be flashed from adb aswell

 



About the author

Dr-Hack

Owner and founder of Hackology Internet Security Portal and BlackAngel. These days teach hacking so others can stay safe. Apart from hacking, a Movie Fanatic.Also run a tech Blog, small projects like encrypted paste etc and various PoC and research articles

Pin It on Pinterest

Shares