Brutkey

kajer :notverified:
@kajer@infosec.exchange
kajer :notverified:
@kajer@infosec.exchange

1|msm8953_32:/sys $ getprop ro.build.version.release

8.1.0

kajer :notverified:
@kajer@infosec.exchange

/system is full of $vendor branded APK files

kajer :notverified:
@kajer@infosec.exchange

1|msm8953_32:/ $ cat /etc/passwd
#**【THIS IS AN AUTOGENERATED FILE! DO NOT MODIFY!】


#**【Defined in file: "device/qcom/common/config.fs"】


qti_diag::29012901:/:/system/bin/sh
rfs::29032903:/:/system/bin/sh
rfs_shared::29042904:/:/system/bin/sh

kajer :notverified:
@kajer@infosec.exchange

[2854059.422692] usb 1-1.1: New USB device found, idVendor=05c6, idProduct=f000, bcdDevice= 3.18
[2854059.422708] usb 1-1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[2854059.422715] usb 1-1.1: Product: Android
[2854059.422721] usb 1-1.1: Manufacturer: Android
[2854059.422726] usb 1-1.1: SerialNumber: [redacted]
[2854059.427519] usb-storage 1-1.1:1.0: USB Mass Storage device detected
[2854059.428200] scsi host4: usb-storage 1-1.1:1.0

kajer :notverified:
@kajer@infosec.exchange

ooo

Android Bootloader - UART_DM Initialized!!!
[0] welcome to lk[10] platform_init()
[10] target_init()
[80] SDHC Running in HS400ES mode
[90] WARNING: All phase passed.The selected phase may not be optimal
[100] Done initialization of the card

kajer :notverified:
@kajer@infosec.exchange

[2854059.422692] usb 1-1.1: New USB device found, idVendor=05c6, idProduct=f000, bcdDevice= 3.18
[2854059.422708] usb 1-1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[2854059.422715] usb 1-1.1: Product: Android
[2854059.422721] usb 1-1.1: Manufacturer: Android
[2854059.422726] usb 1-1.1: SerialNumber: [redacted]
[2854059.427519] usb-storage 1-1.1:1.0: USB Mass Storage device detected
[2854059.428200] scsi host4: usb-storage 1-1.1:1.0

kajer :notverified:
@kajer@infosec.exchange

Oooo

Flip a dip switch, plug USB

05c6:901d Qualcomm, Inc. Android

kajer :notverified:
@kajer@infosec.exchange

Two more closeup

kajer :notverified:
@kajer@infosec.exchange

Front housing contains camera via ribbon cable and IR led ring, as well as God and both wifi antennas

kajer :notverified:
@kajer@infosec.exchange

The back housing contains a momentary push button with led ring
One internal cellular antenna
One sma type antenna for the other cellular connection
The weird 7 pin power data connection with only 6 pins connected

kajer :notverified:
@kajer@infosec.exchange

Nothing of note under the lantronix daughter board