华为光猫HG8120C的一些配置文件

telnet 192.168.1.1:23
root
admin
shell

"telecomadmin" Password="nE7jA%5m"

#查看用户密码
WAP(Dopra Linux) # cat /etc/passwd
root:x:0:0:root:/root:/bin/sh
nobody:x:65534:65534::/tmp:/bin/sh

#查看影子密码
WAP(Dopra Linux) # cat /etc/shadow
root:aqnaBbVaP.9Zo:14453:0:99999:7:::
nobody:!:11141:0:99999:7:::
sshd:*:11880:0:99999:7:-1:-1:0


#一些结构体的定义
cat /etc/wap/hw_boardinfo_readme.txt

#define HW_DM_PD_LOID_OBJ_ID              (0x00000016)   /* GPON/EPON LOID     *

#网页命令行列表
WAP(Dopra Linux) # cat /etc/wap/hw_shell_cli.xml
<CliRoot>
<ListFileDetail CmdStr="ll" ObjPath="ll" Help="" CmdGroup="0x00000010">
</ListFileDetail>
<ListFile CmdStr="ls" ObjPath="ls" Help="" CmdGroup="0x00004010">
</ListFile>
<EquipMode CmdStr="EquipMode.sh" ObjPath="EquipMode.sh" Help="" CmdGroup="0x00000010">
</EquipMode>
<CalibrateMode CmdStr="CalibrateMode.sh" ObjPath="CalibrateMode.sh" Help="" CmdGroup="0x00000010">
</CalibrateMode>
<Calibrate CmdStr="calibrate.sh" ObjPath="calibrate.sh" Help="" CmdGroup="0x00000010">
</Calibrate>
<Move CmdStr="mw" ObjPath="mw" Help="" CmdGroup="0x00000010">
</Move>
<WifiPerformanceMode CmdStr="WifiPerformanceMode.sh" ObjPath="WifiPerformanceMode.sh" Help="" CmdGroup="0x00000010">
</WifiPerformanceMode>
<WifiCalibrate CmdStr="iwpriv" ObjPath="iwpriv" Help="" CmdGroup="0x00000010">
</WifiCalibrate>
<SetSpecconfig CmdStr="setspecconfig.sh" ObjPath="setspecconfig.sh" Help="" CmdGroup="0x00000010">
</SetSpecconfig>
<GetSpecconfig CmdStr="getspecconfig.sh" ObjPath="getspecconfig.sh" Help="" CmdGroup="0x00000010">
</GetSpecconfig>
<Customize CmdStr="customize.sh" ObjPath="customize.sh" Help="" CmdGroup="0x00000010">
</Customize>
<Getcustomize CmdStr="getcustomize.sh" ObjPath="getcustomize.sh" Help="" CmdGroup="0x00000010">
</Getcustomize>
<Copycustomcfg CmdStr="copycustomcfg.sh" ObjPath="copycustomcfg.sh" Help="" CmdGroup="0x00000010">
</Copycustomcfg>
<Restorehwmode CmdStr="restorehwmode.sh" ObjPath="restorehwmode.sh" Help="" CmdGroup="0x00000010">
</Restorehwmode>
<BoardType CmdStr="boardtype.sh" ObjPath="boardtype.sh" Help="" CmdGroup="0x00000010">
</BoardType>
<ModefiyIfconfig CmdStr="ifconfig" ObjPath="ifconfig" Help="" CmdGroup="0x00004010">
</ModefiyIfconfig>
<WifiConfig CmdStr="iwconfig" ObjPath="iwconfig" Help="" CmdGroup="0x00000010">
</WifiConfig>
<EnterDir CmdStr="cd" ObjPath="cd" Help="" CmdGroup="0x00000010">
</EnterDir>
<ShowFile CmdStr="cat" ObjPath="cat" Help="" CmdGroup="0x00000010">
</ShowFile>
<WriteFile CmdStr="echo" ObjPath="echo" Help="" CmdGroup="0x00000010">
</WriteFile>
<DeteleFile CmdStr="rm" ObjPath="rm" Help="" CmdGroup="0x00000010">
</DeteleFile>
<GetCustomInfo CmdStr="getcustominfo.sh" ObjPath="getcustominfo.sh" Help="" CmdGroup="0x00004010">
</GetCustomInfo>
<Collect CmdStr="collect" ObjPath="collect" Help="" CmdGroup="0x00004000"></Collect>
<ChangeMode CmdStr="change mode" ObjPath="change mode" Help="" CmdGroup=""></ChangeMode>
<Reboot CmdStr="reboot" ObjPath="reboot" Help="" CmdGroup="0x00000010"></Reboot>
<Dlw CmdStr="dlw" ObjPath="dlw" Help="" CmdGroup="0x00004010"></Dlw>
<Clw CmdStr="clw" ObjPath="clw" Help="" CmdGroup="0x00004010"></Clw>
<bbspCmddbg CmdStr="dbg" ObjPath="bbspcmd dbg" Help="" CmdGroup="0x00000010">
</bbspCmddbg>
<bbspCmdacl CmdStr="acl" ObjPath="bbspcmd acl" Help="" CmdGroup="0x00000010">
</bbspCmdacl>
<bbspCmdffwd CmdStr="ffwd" ObjPath="bbspcmd ffwd" Help="" CmdGroup="0x00000010">
</bbspCmdffwd>
<bbspCmdcpu CmdStr="cpu" ObjPath="bbspcmd cpu" Help="" CmdGroup="0x00000010">
</bbspCmdcpu>
<ping CmdStr="ping" ObjPath="ping" Help="" CmdGroup="0x00004010">
</ping>
<traceroute CmdStr="traceroute" ObjPath="traceroute" Help="" CmdGroup="0x00004010">
</traceroute>
<ps CmdStr="ps" ObjPath="ps" Help="" CmdGroup="0x00004010">
</ps>
<free CmdStr="free" ObjPath="free" Help="" CmdGroup="0x00004010">
</free>
<ifconfig CmdStr="ifconfig" ObjPath="ifconfig" Help="" CmdGroup="0x00004010">
</ifconfig>
<GetIPConntrack CmdStr="get ip conntrack" ObjPath="cat /proc/net/ip_conntrack" Help="" CmdGroup="0x00004010">
</GetIPConntrack>
<GetIptablesNat CmdStr="get iptables nat" ObjPath="iptables -t nat -nvL" Help="" CmdGroup="0x00004010">
</GetIptablesNat>
<GetIptablesFilter CmdStr="get iptables filter" ObjPath="iptables -nvL" Help="" CmdGroup="0x00004010">
</GetIptablesFilter>
<GetIptablesMangle CmdStr="get iptables mangle" ObjPath="iptables -t mangle -nvL" Help="" CmdGroup="0x00004010">
</GetIptablesMangle>
<GetIptablesRaw CmdStr="get iptables raw" ObjPath="iptables -t raw -nvL" Help="" CmdGroup="0x00004010">
</GetIptablesRaw>
<IP CmdStr="ip" ObjPath="ip" Help="" CmdGroup="0x00004010">
</IP>
<Showbr0mac CmdStr="brctl showmacs br0" ObjPath="brctl showmacs br0" Help="" CmdGroup="0x00004010">
</Showbr0mac>
<bbspcmdRouteshowall CmdStr="bbspcmd route show all" ObjPath="bbspcmd route show all" Help="" CmdGroup="0x00000010">
</bbspcmdRouteshowall>
<ringuserdefine CmdStr="ring user define" ObjPath="sndhlp 0 0x20006101 1 32" Help="" CmdGroup="">
</ringuserdefine>
<startring CmdStr="start ring" ObjPath="sndhlp 0 0x20006206 6 12" Help="" CmdGroup="">
</startring>
<stopring CmdStr="stop ring" ObjPath="sndhlp 0 0x20006207 7 4" Help="" CmdGroup="">
</stopring>
<setringcurrent CmdStr="set ring current" ObjPath="sndhlp 0 0x20006303 3 76" Help="" CmdGroup="">
</setringcurrent>
<displayringvol CmdStr="display ring voltage" ObjPath="sndhlp 0 0x20006302 2 76" Help="" CmdGroup="">
</displayringvol>
<debugdsp CmdStr="debug dsp msg" ObjPath="sndhlp 0 0x20000000 0 12" Help="" CmdGroup="0x00004010">
</debugdsp>
<debugupmsg CmdStr="debug dsp up msg" ObjPath="sndhlp 0 0x2000e126 0x26 4" Help="" CmdGroup="0x00004010">
</debugupmsg>
<debugdownmsg CmdStr="debug dsp down msg" ObjPath="sndhlp 0 0x2000e125 0x25 4" Help="" CmdGroup="0x00004010">
</debugdownmsg>
<printzsp CmdStr="debug zsp" ObjPath="sndhlp 0 0x2000e139 0x39 92" Help="" CmdGroup="0x00004010">
</printzsp>
<printrtprunning CmdStr="debug rtp stack" ObjPath="sndhlp 0 0x2000e158 0x58 8" Help="" CmdGroup="0x00004010">
</printrtprunning>
<printsamplemediastar CmdStr="debug sample mediastar" ObjPath="sndhlp 0 0x2000e159 0x59 264" Help="" CmdGroup="0x00004010">
</printsamplemediastar>
<printmediastar CmdStr="debug mediastar" ObjPath="sndhlp 0 0x2000e15a 0x5a 516" Help="" CmdGroup="0x00004010">
</printmediastar>
<jbpara CmdStr="display jb para" ObjPath="sndhlp 0 0x2000e151 0x51 12 0 0" Help="" CmdGroup="0x00004010">
</jbpara>
<displaychannel CmdStr="display rtp stack para" ObjPath="sndhlp 0 0x2000e14a 0x4a 12 0 0" Help="" CmdGroup="0x00004010">
</displaychannel>
<displaydsp CmdStr="display dsp channel para" ObjPath="sndhlp 0 0x2000e12d 0x2d 12 0 0 " Help="" CmdGroup="0x00004010">
</displaydsp>
<codecstatus CmdStr="display dsp codec status" ObjPath="sndhlp 0 0x2000e129 0x29 12 0 0" Help="" CmdGroup="0x00004010">
</codecstatus>
<displaychannelstatus CmdStr="display dsp channel status" ObjPath="sndhlp 0 0x2000e12e 0x2e 12 0 0" Help="" CmdGroup="0x00004010">
</displaychannelstatus>
<channelstatus CmdStr="display dsp channel running status" ObjPath="sndhlp 0 0x2000e130 0x30 8" Help="" CmdGroup="0x00004010">
</channelstatus>
<displayjbgridstatus CmdStr="display jb grid status" ObjPath="sndhlp 0 0x2000e14e 0x4e 12 0 0" Help="" CmdGroup="0x00004010">
</displayjbgridstatus>
<rtpstat CmdStr="display rtp stack channel stat" ObjPath="sndhlp 0 0x2000e14b 0x4b 12 0 0" Help="" CmdGroup="0x00004010">
</rtpstat>
<displaychipstat CmdStr="display rtp statck chip stat" ObjPath="sndhlp 0 0x2000e14c 0x4c 8 0 0" Help="" CmdGroup="0x00004010">
</displaychipstat>
<dspstatus CmdStr="display dsp chip stat" ObjPath="sndhlp 0 0x2000e12b 0x2b 12 0 0" Help="" CmdGroup="0x00004010">
</dspstatus>
<displaybreakstat CmdStr="display dsp interrupt stat" ObjPath="sndhlp 0 0x2000e149 0x49 0 0 0 0" Help="" CmdGroup="0x00004010">
</displaybreakstat>
<dspversion CmdStr="display zsp version" ObjPath="sndhlp 0 0x2000e136 0x36 8" Help="" CmdGroup="0x00004010">
</dspversion>
<displayDspVersion CmdStr="display rtp stack version" ObjPath="sndhlp 0 0x2000e145 0x45 0 0 0" Help="" CmdGroup="0x00004010">
</displayDspVersion>
<displaypots CmdStr="display pots info" ObjPath="sndhlp 0 0x20006304 4 4" Help="" CmdGroup="">
</displaypots>
<MidGet CmdStr="mid get" ObjPath="mid get" Help="" CmdGroup="0x00004010">
</MidGet>
<MidSet CmdStr="mid set" ObjPath="mid set" Help="" CmdGroup="0x00004010">
</MidSet>
<omcicmddebug CmdStr="omcicmd debug" ObjPath="omcicmd debug" Help="" CmdGroup="0x00004000">
</omcicmddebug>
<omcicmderrorlog CmdStr="omcicmd error log" ObjPath="omcicmd error log" Help="" CmdGroup="0x00004000">
</omcicmderrorlog>
<omcicmdshowlog CmdStr="omcicmd show log" ObjPath="omcicmd show log" Help="" CmdGroup="0x00004000">
</omcicmdshowlog>
<omcicmdclearlog CmdStr="omcicmd clear log" ObjPath="omcicmd clear log" Help="" CmdGroup="0x00004000">
</omcicmdclearlog>
<omcicmdmibshow CmdStr="omcicmd mib show" ObjPath="omcicmd mib show" Help="" CmdGroup="0x00004000">
</omcicmdmibshow>
<omcicmdshowtcont CmdStr="omcicmd show tcont table" ObjPath="omcicmd show tcont table" Help="" CmdGroup="0x00004000">
</omcicmdshowtcont>
<omcicmdshowolt CmdStr="omcicmd show olt type" ObjPath="omcicmd show olt type" Help="" CmdGroup="0x00004000">
</omcicmdshowolt>
<omcicmdmsg CmdStr="omcicmd msg" ObjPath="omcicmd msg" Help="" CmdGroup="">
</omcicmdmsg>
<omcicmdsetolt CmdStr="omcicmd set olt type" ObjPath="omcicmd set olt type" Help="" CmdGroup="">
</omcicmdsetolt>
<omcicmdshowmop CmdStr="omcicmd show mop" ObjPath="omcicmd show mop" Help="" CmdGroup="0x00004000">
</omcicmdshowmop>
<chipdebug CmdStr="chipdebug" ObjPath="chipdebug" Help="" CmdGroup="0x00004010">
</chipdebug>
<memdump CmdStr="md" ObjPath="md" Help="" CmdGroup="0x00004010">
</memdump>
<DisplayMesaage CmdStr="dmesg" ObjPath="dmesg" Help="" CmdGroup="0x00004010">
</DisplayMesaage>
<ShowLog CmdStr="dlog" ObjPath="cat /proc/wap_proc/wap_log" Help="" CmdGroup="0x00004010">
</ShowLog>
<CleanLog CmdStr="clog" ObjPath="clog" Help="" CmdGroup="0x00000010">
</CleanLog>
<SetConsole CmdStr="setconsole" ObjPath="setconsole" Help="" CmdGroup="0x00004110">
</SetConsole>
<WapPs CmdStr="wap.ssp.ps" ObjPath="wap.ssp.ps" Help="" CmdGroup="0x00004010">
</WapPs>
<Top CmdStr="top" ObjPath="top" Help="" CmdGroup="0x00004010">
</Top>
<WapCat CmdStr="wap.cat" ObjPath="wap.cat" Help="" CmdGroup="0x00004010">
</WapCat>
<WapEcho CmdStr="wap.echo" ObjPath="wap.echo" Help="" CmdGroup="0x00004010">
</WapEcho>
<WapDebug CmdStr="wapdebug" ObjPath="wapdebug" Help="" CmdGroup="0x00000010">
</WapDebug>
<Ipv6rule CmdStr="ip -6 rule" ObjPath="ip -6 rule" Help="" CmdGroup="0x00004010">
</Ipv6rule>
<Ipv6route CmdStr="ip -6 route" ObjPath="ip -6 route" Help="" CmdGroup="0x00004010">
</Ipv6route>
<Netstat CmdStr="netstat -na" ObjPath="netstat -na" Help="" CmdGroup="0x00004010">
</Netstat>
<device CmdStr="display device" ObjPath="sndhlp 0 0x2000161a 26 12 0 4" Help="" CmdGroup="0x00004010">
</device>
<hwrt CmdStr="display hw_rt" ObjPath="sndhlp 0 0x2000161a 26 12 1 4" Help="" CmdGroup="0x00004010">
</hwrt>
<hwnh CmdStr="display hw_nh" ObjPath="sndhlp 0 0x2000161a 26 12 2 4" Help="" CmdGroup="0x00004010">
</hwnh>
<hwrp CmdStr="display hw_rp" ObjPath="sndhlp 0 0x2000161a 26 12 3 4" Help="" CmdGroup="0x00004010">
</hwrp>
<hwact CmdStr="display hw_act" ObjPath="sndhlp 0 0x2000161a 26 12 4 4" Help="" CmdGroup="0x00004010">
</hwact>
<mapping CmdStr="display mapping" ObjPath="sndhlp 0 0x2000161a 26  8  6  0" Help="" CmdGroup="0x00004010">
</mapping>
<hwfc CmdStr="display hw_fc" ObjPath="sndhlp 76 0x20001616 0x16 264 1 0 14" Help="" CmdGroup="0x00004010">
</hwfc>
<hwhead CmdStr="display tunnel hw_head" ObjPath="sndhlp 0 0x2000161a 26 12 13 4" Help="" CmdGroup="0x00004010">
</hwhead>
<hwinrt CmdStr="display tunnel hw_in_rt" ObjPath="sndhlp 0 0x2000161a 26 12 14 4" Help="" CmdGroup="0x00004010">
</hwinrt>
<hwoutrt CmdStr="display tunnel hw_out_rt" ObjPath="sndhlp 0 0x2000161a 26 12 16 4" Help="" CmdGroup="0x00004010">
</hwoutrt>
<hwinstat CmdStr="display tunnel hw_in_stat" ObjPath="sndhlp 0 0x2000161a 26 12 15 4" Help="" CmdGroup="0x00004010">
</hwinstat>
<hwoutstat CmdStr="display tunnel hw_out_stat" ObjPath="sndhlp 0 0x2000161a 26 12 17 4" Help="" CmdGroup="0x00004010">
</hwoutstat>
<WifiRXInit CmdStr="WifiRXInit.sh" ObjPath="WifiRXInit.sh" Help="" CmdGroup="0x00000010">
</WifiRXInit>
<WifiTXInit CmdStr="WifiTXInit.sh" ObjPath="WifiTXInit.sh" Help="" CmdGroup="0x00000010">
</WifiTXInit>
<WapCat CmdStr="wap.cat" ObjPath="wap.cat" Help="" CmdGroup="0x00004010">
</WapCat>
<WapEcho CmdStr="wap.echo" ObjPath="wap.echo" Help="" CmdGroup="0x00004010">
</WapEcho>
</CliRoot>WAP(Dopra Linux) #

#WAP Linux系统版本
WAP(Dopra Linux) # cat /etc/wap/wap_version
V800R012C00SPC192B001


#hw_ctree.xml解密解压后的部分文字
#用户名和密码
<X_HW_WebUserInfoInstance InstanceID="1" UserName="useradmin" Password="yqkvt" UserLevel="1" Enable="1"/>
<X_HW_WebUserInfoInstance InstanceID="2" UserName="telecomadmin" Password="nE7jA%5m" UserLevel="0" Enable="1"/>
#最大终端数目限制
<X_HW_AccessLimit Mode="GlobalLimit" TotalTerminalNumber="6"/>
#FTP配置
<X_HW_ServiceManage FtpEnable="0" FtpUserName="root" FtpPassword="admin" FtpPort="21" FtpRoorDir="/mnt/usb1_1/" FtpUserNum="0"/>

再看一个，用户获得一个shell之后执行的内容

WAP(Dopra Linux) # cat /etc/profile
# /etc/profile
# init bash prompt and enviroment.
#

#alias ls="ls --color=auto"
alias ll="ls -l"
alias cp="cp -i"
alias ..="cd .."

PATH="/bin:/usr/bin:/sbin:/usr/sbin"
#PS1="\[\033[32m\]\h \w\[\033[m\] \\$ "
PS1="WAP(Dopra Linux) # "

#set core dump according to the hw_wap_debug.config file
var_file_name=/proc/wap_proc/debug_config
if [ -e $var_file_name ]; then
        var_find_core_flag=HW_WAP_AUTO_CORE_DUMP
        var_find_mount=HW_WAP_AUTO_MOUNT
        var_core_flag=`grep $var_find_core_flag $var_file_name | sed 's/[^0]*//' | sed 's/0x//'`
        var_core_mount=`grep $var_find_mount $var_file_name | sed 's/[^\"]*//' | sed 's/"//' | cut -f 1 -d '"'`
        if [ "$var_core_flag" != "" ] && [ "$var_core_flag" != "FFFFFFFF" ] && [ $var_core_flag -eq 1 ]; then
                ulimit -c unlimited
                echo "profile open core dump, flag=$var_core_flag"
                if [ "$var_core_mount" != "" ];then
                        mount $var_core_mount
                        if [ $? = 0 ];then
                                echo "/mnt/nfs/core-%e-%p-%t" > /proc/sys/kernel/core_pattern
                                echo "profile 'mount $var_core_mount' successful"
                        else
                                echo "/var/core-%e-%p-%t" > /proc/sys/kernel/core_pattern
                                echo "profile 'mount $var_core_mount' failed"
                                route
                                ifconfig
                        fi
                else
                        echo "/var/core-%e-%p-%t" > /proc/sys/kernel/core_pattern
                        echo "profile 'mount $var_core_mount' failed"
                fi
        else
                ulimit -c 0
                echo "profile close core dump, flag=$var_core_flag"
        fi
else
        ulimit -c 0
        echo "profile close core dump"
fi

if [ `id -u` -eq 0 ]; then
        umask 000
else
        umask 000
fi

USER=`id -un`
LOGNAME=$USER

HOSTNAME=`/bin/hostname`
HISTSIZE=0

TMOUT=900

EDITOR=vi
VISUAL=vi

PAGER=more

INPUTRC="/etc/inputrc"

export PATH PS1 USER LOGNAME HOSTNAME HISTSIZE EDITOR VISUAL PAGER INPUTRC TMOUT

# Running the local scripts from the user
for i in /etc/profile.d/*.sh ; do
        if [ -x $i ]; then
                . $i
        fi
done
unset i

WAP(Dopra Linux) #