Upon some further research it seems their shell is very locked down and there's no way to break out of it. With that said I did find a extremely easy command injection exploit.
Although it was helpful it's not actually needed to unlock the system, you can do that simply from the NVRAM.
On boot it checks for the script /nvram/0/sys_setup.sh and runs if it exists, I put together a script that runs some code I compiled to enable telnet on every boot, set the client password and set the permissions to the maximum level so you can access all the restricted commands from the restricted shell. You can access pretty much everything from there, even the Intel cpu:
I've uploaded my script, source and binary here if people want to use it, enjoy.
https://mega.nz/#!g8lTiSbD!mC4J8cFBo38Vv...waLrq6s-XU
Although it was helpful it's not actually needed to unlock the system, you can do that simply from the NVRAM.
On boot it checks for the script /nvram/0/sys_setup.sh and runs if it exists, I put together a script that runs some code I compiled to enable telnet on every boot, set the client password and set the permissions to the maximum level so you can access all the restricted commands from the restricted shell. You can access pretty much everything from there, even the Intel cpu:
Code:
[ 6] Atom> help
help
Directory Commands ->
manuf : <DIR> Manuf
status : Show Modem Status
!reset : Reset Modem
system : Run shell command
help : Display commands
!logout : Disconnect telnet/SSH
quit : Quit the Atom CLI
Type '<cmd> ?' for available help.
Return Status: 0
[ 7] Atom> manuf
manuf
[ 8] Manuf> help
help
Directory Commands ->
ccTest : Dummy Cable Card Test
boottimeout : Set CEFDK boot timeout
macset : Set Atom MAC address
loadFromUSB : Load Inactive Bank from USB
sectorInfo : Show sector info
status : Show Modem Status
!reset : Reset Modem
system : Run shell command
help : Display commands
!logout : Disconnect telnet/SSH
quit : Quit the Atom CLI
Type '<cmd> ?' for available help.
Return Status: 0
[ 9] Manuf>I've uploaded my script, source and binary here if people want to use it, enjoy.
https://mega.nz/#!g8lTiSbD!mC4J8cFBo38Vv...waLrq6s-XU