Web App for T-Mobile Arcadyan KVD21 5G Gateway

Overview

Instructions

Overview:

This project started as a simple way to monitor the advanced cell metrics provided by the Arcadyan KVD21 and per usual, ballooned into an full fledged Web Admin for the device. I used a packet sniffer to monitor the HTTP requests the T-Mobile Home Internet App transmits and then did my best to re-produce the Mobile App's functionality. Using nmap, I was able to deduce that the Gateway is running a custom version of OpenWRT (According to this user, the gateway is running Android) but without SSH enabled, there isnt much more we can do outside of the functionality available via the currently exposed API's I've discovered (see below). Any attempts to discover new endpoints via brute force have been unsuccessful.

Note: VPN's must be disabled in order to connect to the gateway via the webapp.

Upcoming Functionality:

  • Add New WiFi Network
  • Ban/Delete Client from Network
  • Display metric rating in Signal Popover
  • Historic Cell Metric Data

Discovered API Endpoints

  • /TMI/v1/network/telemetry?get=clients
  • /TMI/v1/network/telemetry?get=sim
  • /TMI/v1/network/telemetry?get=cell
  • /TMI/v1/auth/admin/reset
  • /TMI/v1/auth/refresh
  • /TMI/v1/auth/login
  • /TMI/v1/profile/schedules
  • /TMI/v1/version
  • /TMI/v1/setup/onboard
  • /TMI/v1/gateway/reset?set=reboot
  • /TMI/v1/gateway/get=all
  • /TMI/v1/network/configuration/v2?get=ap
  • /TMI/v1/network/configuration/v2?set=ap
  • /auth.fcgi
  • /login_app.cgi?chk

Open Ports

  • 53/TCP open domain Cloudflare public DNS
  • 80/TCP open http lighthttpd 1.4.59
  • 3517/TCP open 802-11-iapp?
  • 8080/TCP open http-proxy

Screenshots

Login Signal WiFi Wifi Editing System System Clients

You might also like...

Most modern mobile touch slider with hardware accelerated transitions

Most modern mobile touch slider with hardware accelerated transitions

Get Started | Documentation | Demos Swiper Swiper - is the free and most modern mobile touch slider with hardware accelerated transitions and amazing

Jan 5, 2023

Our Expo-based mobile application for demonstration purposes.

Capable Care reference implementation This repository provides a working example of a React Native mobile application (built on Expo) integrating Capa

Oct 1, 2022

Modal in desktop, fullscreen in mobile

React Full Screen Modal Why? Modals typically don't work well for modals. They take up a lot of space and often squish their contents. This library ai

Mar 7, 2022

🚀 Aplicação mobile com React Native produzida durante o Next Level Week #05

🚀 Aplicação mobile com React Native produzida durante o Next Level Week #05

✨ Tecnologias Esse projeto foi desenvolvido com as seguintes tecnologias: React Native Typescript Expo 💻 Projeto Aplicativo para lhe ajudar a lembrar

May 28, 2022

USA Covid-19 Tracker is a mobile-first application built with React and Redux to give precise information about the virus behavior in the United States. Great transitions and user feedback made with plain CSS.

USA Covid-19 Tracker is a mobile-first application built with React and Redux to give precise information about the virus behavior in the United States. Great transitions and user feedback made with plain CSS.

React.js USA Covid-19 Tracker This application allows the public to keep track of the stadistics of the Covid-19 Pandemic in the United Stated. You wi

Oct 25, 2022

Choosy is a mobile application that allows users to create photo polls that others can vote on and help declare which photo is the best.

Choosy is a mobile application that allows users to create photo polls that others can vote on and help declare which photo is the best.

Choosy - Create photo polls The freshest mobile application for your photo polls! Explore the docs » Table of Contents Introduction App concept Target

Sep 7, 2022

Course material for Mobile Application Development, Integrated Digital Media, Tandon School of Engineering, NYU

Mobile-Application-Development Course material for Mobile Application Development, Integrated Digital Media, Tandon School of Engineering, NYU Classs

May 1, 2022

Aplicativo mobile desenvolvido para o FF-Hackathon.

Aplicativo mobile desenvolvido para o FF-Hackathon.

✔️ AllTo - FF Hacka | Shawee ✔️ FF Hacka | Project | Technologies | How to use | License ℹ️ What's FF Hacka? Hackatons são eventos que envolvem tecnol

Jun 17, 2022

Let's build better mobile apps

Let's build better mobile apps

applogger Overview applogger is a React Native mobile application framework that helps in minimizing QA issue-reporting time and developer debugging t

Nov 4, 2022
Comments
  • Failure to launch. Browser messages follow:

    Failure to launch. Browser messages follow:

    Compiled with problems:X

    ERROR

    [eslint] Must use import to load ES Module: /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/@eslint/eslintrc/universal.js require() of ES modules is not supported. require() of /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/@eslint/eslintrc/universal.js from /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/eslint/lib/linter/linter.js is an ES module file as it is a .js file whose nearest parent package.json contains "type": "module" which defines all .js files in that package scope as ES modules. Instead rename universal.js to end in .cjs, change the requiring code to use import(), or remove "type": "module" from /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/@eslint/eslintrc/package.json.

    ERROR

    Error: Child compilation failed: [eslint] Must use import to load ES Module: /Users/David/git/Arcadyan-5G-Web-A dmin/node_modules/@eslint/eslintrc/universal.js require() of ES modules is not supported. require() of /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/@eslint/eslin trc/universal.js from /Users/David/git/Arcadyan-5G-Web-Admin/node_modules/esli nt/lib/linter/linter.js is an ES module file as it is a .js file whose nearest parent package.json contains "type": "module" which defines all .js files in that package scope as ES modules. Instead rename universal.js to end in .cjs, change the requiring code to use i mport(), or remove "type": "module" from /Users/David/git/Arcadyan-5G-Web-Admi n/node_modules/@eslint/eslintrc/package.json.

    • child-compiler.js:169 [Arcadyan-5G-Web-Admin]/[html-webpack-plugin]/lib/child-compiler.js:169:18

    • Compiler.js:551 finalCallback [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compiler.js:551:5

    • Compiler.js:577 [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compiler.js:577:11

    • Compiler.js:1196 [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compiler.js:1196:17

    • Hook.js:18 Hook.CALL_ASYNC_DELEGATE [as _callAsync] [Arcadyan-5G-Web-Admin]/[tapable]/lib/Hook.js:18:14

    • Compiler.js:1192 [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compiler.js:1192:33

    • Compilation.js:2787 finalCallback [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compilation.js:2787:11

    • Compilation.js:3092 [Arcadyan-5G-Web-Admin]/[webpack]/lib/Compilation.js:3092:11

    opened by arnstein99 13
  • Unable to launch app:

    Unable to launch app: "Invalid options object"

    My experience with node/etc has been through a Linux VM so it's very possible I'm doing something wrong on my end when it comes to setting things up properly in the Windows 10 environment.

    That said, here is the output I receive after cloning the repo and attempting to start the app.

    >npm --version
    8.15.0
    
    F:\>cd Arcadyan-5G-Web-Admin
    
    F:\Arcadyan-5G-Web-Admin>npm install
    npm WARN deprecated [email protected]: Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
    npm WARN deprecated [email protected]: This SVGO version is no longer supported. Upgrade to v2.x.x.
    
    added 1476 packages, and audited 1477 packages in 34s
    
    211 packages are looking for funding
      run `npm fund` for details
    
    6 high severity vulnerabilities
    
    To address all issues (including breaking changes), run:
      npm audit fix --force
    
    Run `npm audit` for details.
    
    F:\Arcadyan-5G-Web-Admin>npm start
    
    > [email protected] start
    > react-scripts start
    
    Invalid options object. Dev Server has been initialized using an options object that does not match the API schema.
     - options.allowedHosts[0] should be a non-empty string.
    

    EDIT: And yes, I did try running the npm audit fix --force command beforehand as well

    opened by Blake-LeBlanc 7
  • npm audit result

    npm audit result

    nth-check <2.0.1 Severity: high Inefficient Regular Expression Complexity in nth-check - https://github.com/advisories/GHSA-rp65-9cf3-cjxr fix available via npm audit fix --force Will install [email protected], which is a breaking change node_modules/svgo/node_modules/nth-check css-select <=3.1.0 Depends on vulnerable versions of nth-check node_modules/svgo/node_modules/css-select svgo 1.0.0 - 1.3.2 Depends on vulnerable versions of css-select node_modules/svgo @svgr/plugin-svgo <=5.5.0 Depends on vulnerable versions of svgo node_modules/@svgr/plugin-svgo @svgr/webpack 4.0.0 - 5.5.0 Depends on vulnerable versions of @svgr/plugin-svgo node_modules/@svgr/webpack react-scripts >=2.1.4 Depends on vulnerable versions of @svgr/webpack node_modules/react-scripts

    6 high severity vulnerabilities

    opened by JeodC 1
  • Doubts about WiFi radio reporting

    Doubts about WiFi radio reporting

    Hello Christopher,

    I have a bash shell script that I use to interrogate the WiFi status of my Arcadyan device:

    #
    # The argument is the transient authentication key.
    # The output is the gateway WiFi settings as JSON.
    curl http://192.168.12.1/TMI/v1/network/configuration\?get=ap -H "Authorization:Bearer $1"
    

    The output is as follows:

    {
      "2.4ghz": {
        "airtimeFairness": true,
        "channel": "Auto",
        "channelBandwidth": "Auto",
        "isMUMIMOEnabled": true,
        "isRadioEnabled": false,
        "isWMMEnabled": true,
        "maxClients": 128,
        "mode": "auto",
        "ssid": {
          "encryptionMode": "AES",
          "encryptionVersion": "WPA2/WPA3",
          "isBroadcastEnabled": true,
          "ssidName": "TMOBILE-49F9",
          "steered": false,
          "wpaKey": "***"
        },
        "transmissionPower": "100%"
      },
      "5.0ghz": {
        "airtimeFairness": true,
        "channel": "Auto",
        "channelBandwidth": "80MHz",
        "isMUMIMOEnabled": true,
        "isRadioEnabled": false,
        "isWMMEnabled": true,
        "maxClients": 128,
        "mode": "auto",
        "ssid": {
          "encryptionMode": "AES",
          "encryptionVersion": "WPA2/WPA3",
          "isBroadcastEnabled": true,
          "ssidName": "TMOBILE-49F9",
          "steered": false,
          "wpaKey": "***"
        },
        "transmissionPower": "100%"
      }
    }
    

    In particular, this report indicates that both radios are disabled.

    When I launch your tool (npm start) I get a web page that is mostly correct, except that the report indicates that both radios are enabled.

    D.A.

    opened by arnstein99 1
Owner
null
Rocket Bank is a finance mobile app built for XP Mobile Challenge.

Rocket Bank is a mobile application made with React Native. You can track your portfolio performance, make deposits and withdrawals, and buy and sell

Rafo 10 Jul 27, 2022
WPPConnect/mobile is an open source project with the objective of automating whatsapp web using the android or ios mobile browser and being able to perform all the functions of our wa-js project

WPPConnect/mobile is an open source project with the objective of automating whatsapp web using the android or ios mobile browser and being able to perform all the functions of our wa-js project, so it is possible to create a customer service, media sending, intelligence recognition based on artificial phrases and many other things, use your imagination to change and modify this project or collaborate on improvements...

null 11 Dec 28, 2022
Recipe providing mobile app, User selects ingredients in pantry and is then provided recipes for those ingredients. App contains a signup/login, meal planner and grocery list pages.

Recipog Student Information Name Connor de Bruyn Username Destiro Assignment SWEN325 A2 Description “Recipog” is a recipe providing app that allows th

Connor de Bruyn 1 Dec 26, 2021
Concircle scanner mobile app is application That helps you scan your order and position and to know if there are exact or not. it's cross-platform app.

Concircle scanner mobile app ⭐ Star on GitHub — it motivates Me a lot! Concircle scanner mobile app is application That helps you scan your order and

Aymen Ouerghui 10 May 7, 2022
Instant mobile web app creation

app.js - mobile webapps made easy App.js is a lightweight JavaScript UI library for creating mobile webapps that behave like native apps, sacrificing

Kik 2.9k Dec 30, 2022
Final Project 3 - Mobile App Hotel Reservation

Hotel Reservation Mobile App Instruksi Pada Final Project kali ini, kamu diminta untuk membuat cloning dari aplikasi Airbnb, khusus untuk fitur-fitur

Akhsan Bayu 2 Jan 3, 2022
Fetching data from REST COUNTRIES API, this app (mobile version for now) gives information like area, population, capital, and borders for 195 countries from seven continents.

Space Travellers' Hub World Countries App works with an API which returns informations about 195 countries. Fetching data from REST COUNTRIES API, thi

Nicolae Pop 7 Aug 8, 2022
This project is a React Native Boilerplate that can be used to kickstart a mobile app.

Meta Point People: Mounir Dhahri This is an Artsy OSS project. Don't know what Artsy is? Check out this overview and more, or read our objc.io on team

Artsy 4 Jul 6, 2022
An easily internationalizable, mobile-friendly datepicker library for the web

react-dates An easily internationalizable, accessible, mobile-friendly datepicker library for the web. Live Playground For examples of the datepicker

Airbnb 12k Dec 30, 2022
Covid-19 Tracker is a mobile web application showcasing the covid-19 statistics in Africa.

Covid-19 Tracker is a mobile web application showcasing the covid-19 statistics in Africa. when the user clicks on the countries' cards, they will be rendered to the details page that contains more information about the covid-19 in the selected country. Also, the user can search for a specific country using the search bar.

Nedjwa Bouraiou 7 Sep 6, 2022