I have OUTDOOR WI-FI CPE installed by my ISP for internet connection. Manufacturer: "Telenet systems" Model: "TWI 1040 - PE"
The specification on their website says it supports HTTP web based GUI management.
The ISP probably set it as bridge mode. So if i keep my IP as automatic (DHCP On) i cannot access CPE's configuration page. To solve this i assigned my LAN adapter static ip 192.168.0.x subnetmask 255.255.255.0 gateway 192.168.0.1
Now when i power up the CPE, i can detect the CPE at 192.168.0.254 for few seconds, then again it becomes inaccessible. & IP scanner/Port scanner can not detect it untill i restart CPE.
During the little time window, if i open http://192.168.0.254 i get a login page. the source code is given below.
<html>
<head>
<LINK REL="stylesheet" href="../styleSheet.css" type="text/css">
<script type = "text/javascript">
// Note: Like all Javascript password scripts, this is hopelessly insecure as the user can see
//the valid usernames/passwords and the redirect url simply with View Source.
// And the user can obtain another three tries simply by refreshing the page.
//So do not use for anything serious!
var count = 2;
function showStatus()
{
var vmesg = document.getElementById('99');
vmesg.style.visibility="hidden";
var mesg = vmesg.innerHTML;
//alert(mesg)
// mesg = mesg.replace(/(<BR>|<br>)+/g, '');
mesg = mesg.replace(/( )+/g, '');
//alert(mesg)
mesg = mesg.replace(/(&)+/g, '');
mesg = mesg.replace(/(nbsp)+/g, '');
mesg = mesg.replace(/(<BR>|<br>)+/g, '@');
//mesg = mesg.replace(/(N)+/g, '@');
//mesg = mesg.replace(/(S)+/g, '@');
//alert(mesg)
var iwmesg=mesg.split("@");
// alert(iwmesg)
document.getElementById('2').innerHTML=iwmesg[0].split(":")[1];
// document.getElementById('2').innerHTML=iwmesg[1].split(":")[1];
// mesg = mesg.replace(/(N)+/g, '@');
mesg = mesg.replace(/(=)+/g, '@');
// alert(mesg)
cwmesg=mesg.split("@");
var cutcw=cwmesg[3];
cutcw=cutcw.split("N");
// document.getElementById('3').innerHTML=cwmesg[3].split("=")[1];
// alert(cutcw)
document.getElementById('3').innerHTML=cutcw[0];
var mode = document.getElementById('16');
var nmode = mode.innerHTML;
nmode = nmode.replace(/(<BR>|<br>)+/g, '');
mode.innerHTML = nmode;
}
function validate() {
var un = document.myform.username.value;
var pw = document.myform.pword.value;
var valid = false;
var unArray = ["root"]; // as many as you like - no comma after final entry
var pwArray = ["5up"]; // the corresponding passwords;
for (var i=0; i <unArray.length; i++) {
if ((un == unArray[i]) && (pw == pwArray[i])) {
valid = true;
break;
}
}
if (valid) {
//alert ("Login was successful");
//alert(window.location);
//window.location = window.location+"/APStatus"
//var loc = "http://192.168.0.11/login.html";
var loc = window.location+"";
var pos = loc.indexOf("cgi-bin");
var newloc = loc.substr(0,pos)+"cgi-bin/start";
//alert(newloc);
window.location = newloc;
return true;
}
var t = " tries";
if (count == 1) {t = " try"}
if (count >= 1) {
alert ("Invalid username and/or password. You have " + count + t + " left.");
document.myform.username.value = "";
document.myform.pword.value = "";
setTimeout("document.myform.username.focus()", 25);
setTimeout("document.myform.username.select()", 25);
count --;
}
else {
alert ("Still incorrect! You have no more tries left!");
document.myform.username.value = "No more tries allowed!";
document.myform.pword.value = "";
document.myform.username.disabled = true;
document.myform.pword.disabled = true;
return false;
}
}
</script>
</head><body onload="showStatus()">
<meta http-equiv="refresh" content="20" >
<table id="apStatus" bgcolor="#33aaaa" cellspacing=1 cellpadding=4>
<tr class="headerBLK2"><td>Station SSID:</td>
<td id="2"></td></tr>
<tr class="headerBLK2"><td>Signal Strength:</td>
<td id="3"></td></tr>
<tr class="headerBLK2"><tr class="headerBLK2"><td>Firmware Version</td>
<td id="16">1.2.8<br><br> <br><br></td></tr>
<tr><td id="9"></td></tr>
<table>
<br><br>
<table align="center">
<form METHOD=POST id="myform" action="start">
<tr>
<td>ENTER USER NAME</td><td> <input type="text" name="username"></td>
</tr><tr>
<td>ENTER PASSWORD</td><td><input type="password" name="pword"></td>
</tr><tr>
<td colspan=2 align="center"><input type="submit" value="LogIn" name="Submit"></td>
</tr>
</form>
</table>
<p hidden="hidden" id="99" class="hide">ath0     IEEE802.11g ESSID:"An0kit-ss3ccA-Eth3r_CP3" <br><br>         LinkQuality=72/94 Signallevel=-69dBm Noiselevel=-95dBm<br><br><br><br></p>
<!--p hidden="hidden" id="99" class="hide">ath0     IEEE802.11g ESSID:"An0kit-ss3ccA-Eth3r_CP3" <br><br>         LinkQuality=85/94 Signallevel=-65dBm Noiselevel=-95dBm<br><br><br><br></p-->
</body>
<html>
Obviously either the manufacturer has implemented the login page poorly or more likely my ISP has customized firmware of CPE. If i enter username: "root" & password: "5up" i get nothing but the same page.
Why after power up CPE remains accessible for short time only. and is there any method to log into this page.
