guyz92
Senior Member
- Joined
- Feb 4, 2009
- Messages
- 1,491
- Reaction score
- 116
Yes, that doesn't provide anything that would benefit the users, and does seem quite concerning.
That's why i always maintain to use commercially available or open source routers, and never devices customised by the isp.
I wonder how difficult it would be to reverse engineer the protocol and feed false data to the analytics servers?
Do you have a copy of the firmware (eg an update file), or would it need to be extracted from a live device in order to research what its doing?
The firmware is pushed using TR-069 RPC Download command.
The firmware file name is called Singtel-ACElite_v1.00.01_build43a_20201106.w
TR-069 should be sending a HTTP URL when it trigger the TR-069 Download Command.
I didn't managed to do a packet capture as I do not have a high-end switch that can do port-mirroring.
Maybe If any kind soul know how to send TR-069 command to Singtel, can try to send it to this URL:
Code:
https://dm-hdm.singnet.com.sg/
TR-069 need a "CR" URL that is listening on the CPE. This way Singtel TR-069 server can send the RPC command to the CPE.
The TR-069 Logs:
Code:
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 CR: There is no "Digest" string in auth_line.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 CR: Connection request cause 401 error.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Received connection request]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 CR: Finish poccess Connection request.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Sending 6 CONNECTION REQUEST inform to ACS: 165.21.0.82.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Received Inform Response]
[xx:xx:xxxx:xx:xx:29]:[info]:[TR069 Received Download]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 RpcMethod Download]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Sending Download Response]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Session end.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Firmware Singtel-ACElite_v1.00.01_build43a_20201106.w download successfully.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Sending 7 TRANSFER COMPLETE inform to ACS: 165.21.0.82.]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Received Inform Response]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Sending TransferComplete]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Received TransferComplete Response]
[xx:xx:xxxx:xx:xx:xx]:[info]:[TR069 Session end.]
Last edited: