Inspirated

 
 

May 6, 2009

Breaking the ISP shackles on Huawei SmartAX MT 882

Filed under: Blog — krkhan @ 10:56 am

What does an ISP do when it needs to sell a customized router? Well, if they’re smart, they go for a Chinese product; re-brand it as their own, slap stupid restrictions on it and then shove the whole thing down the customers’ throats.

Last year, when I came to Saudi Arabia on vacations, I got ADSL installed on my phone-line. As mentioned above, a Huawei SmartAX MT 882 was provided by the ISP. Interestingly, it came not only with a re-branded appearance, but also with a customized firmware which purged all Huawei logos and references from the administration interface. As a side note, switching from a Linksys WAG200G (which I had back in Pakistan) to the Huawei thing was more or less like transitioning from GIMP/Photoshop to MS Paint. For example, even though I had UPnP enabled on the goddamned Chinese weapon, it never worked. Leaving me no alternative but to forward the ports manually.

Back to the topic, the device worked halfway decently. That is, until I came back during these vacations and bought the ADSL service from a different ISP. As soon as I popped up the configuration interface to type in the ADSL credentials, I was hit with this:

Huawei SmartAX MT882 Configuration Interface

See any issues? The username is already tied to the older ISP. My new username is something like “[a-number-I-can't-remember]@1024.nesma.net.sa“. The configuration interface only allows me to type in the [number-I-can't-remember] part, effectively allowing usernames only of the format: “[a-number-I-can't-remember]@1024.afaqe2e.com“. Because of the old ISP’s bitch-ingly idiosyncratic attempt of monopolizing sales, I apparently needed to buy another router to work with the new username.

Hell, no. If I had actually went ahead and bought another router for this reason alone, I might’ve as well stopped calling myself a geek. Looking for a fix, the first thought that naturally occurred to me was to try and flash the firmware. Again, firmware flashing for such crippled devices isn’t any less of a bitch either. Curiously, I opened up the source of the interface webpage. Apart from a total mess of tag-soup the likes of which I had only ever seen in FrontPage websites, I spotted this:

<INPUT type="hidden" size="30" maxlength="63" name="pppuser" VALUE="51252403762@1024.afaqe2e.com">
<INPUT type="text" name="pppuser_prefix" SIZE="20" MAXLENGTH="35" VALUE="51252403762">
@<INPUT type="text" name="rate" SIZE="5" MAXLENGTH="15" VALUE="1024">.afaqe2e.com

Er.. a hidden input field that basically contains the whole username. What for? I had and still have no idea. Nevertheless, it gave me a clue that the "afaqe2e.com" part is not hard-coded in the customized firmware. That is, if I could only manage to somehow input the new username unmodified in the router, it should still work.

Bling.

  • Backup the router configuration.
  • Open it in a text editor.
  • Search for the username.
  • Change it.
  • Save the file and “restore” it through the administrative interface.
  • Restart the device, and stick a middle finger to the monopolizing ISP’s.
  • Pat yourself on the back for being the William Wallace of home internet gateways.
Tags: , , , , , , , , , , , , ,

7 Comments »

  1. Man awesome thinking hacking the firmware file that.

    Comment by Deaq — May 10, 2009 @ 7:50 pm

  2. Hacking in the purest form. Brilliant

    Comment by Matthew — June 25, 2009 @ 1:59 pm

  3. @Deaq & Matthew: Thanks :) . Not hacking per se but still, finding quick workarounds is fun.

    Comment by krkhan — July 10, 2009 @ 10:29 pm

  4. hello i am using huawei smart ax mt 882 router
    its got a firmware dated july 2005
    i really need a new firmware
    tried spending 3 hrs in google bt cudnt get my dirty hands on a new firmware widout paying up
    cud anyone help me with this
    thanks in advance…………………
    plz send the firmware 2 vijnthn@yahoo.com

    Comment by vijnth — May 5, 2011 @ 6:33 am

  5. bro pls tell me how to erase all of mt882 or how to delete firmware using cli command or http://ftp...

    need help

    Comment by Zero — November 26, 2011 @ 2:51 am

  6. bro pls tell me how to erase all of mt882 or how to delete firmware using cli command or which way

    Comment by zero — January 17, 2012 @ 2:23 pm

  7. zero, I’m sory but I don’t have the Huawei SmartAX MT 882 router anymore :) .

    Comment by krkhan — January 17, 2012 @ 10:32 pm

RSS feed for comments on this post. TrackBack URL

Leave a comment

One small verification for man, one giant PITA for bots: