1. biggjoe's Avatar
    Hey Everyone,

    At first, I was curious as to how many people on AndroidCentral currently have Sprint as a Carrier and also currently use the Sprint Airave device. Then I found bits and pieces of Sprint Airave-related postings throughout this website.

    I thought maybe we can devote this thread to any and all things related to the Sprint Airave device (especially exploits if at all possible).

    It is unfortunate, that there is such terrible support from Sprint, when it comes to this great device. I tried calling Airvana, who makes the current generation of Airave devices from Sprint, only to be told that I have to work with Sprint directly.

    Anyway, has anyone managed to either telnet or ssh into the MobiLinux running inside the Airave?

    Thanks!

    BJ

    06-10-2011 03:58 PM
  2. biggjoe's Avatar
    Any takers?

    Sent from my LS670 using Tapatalk
    06-11-2011 09:16 PM
  3. dchawk81's Avatar
    What exactly could be gained from hacking an Airave? As far as I know it's just a signal.
    06-12-2011 01:26 AM
  4. dakev's Avatar
    For starters using it for a prepaid service sold by sprint. Second, spoofing the gps so when the weather gets bad and the gps signal goes out I don't have to worry about loosing my signal. Third, the big long wire I have to run through my house just to get a gps signal could be gotten rid of.

    I see plenty of reasons to hack the heck out of this thing. Has anyone made any progress?
    08-27-2011 09:44 PM
  5. completelylost's Avatar
    Can you root an Airave? I dont want to buy high speed internet... is there a way to root it so it will work off of my phones internet?
    09-17-2011 08:11 PM
  6. ssybesma's Avatar
    see the Sprint Community thread:

    Sprint Community: Space: Airave

    My post on there is entitled:

    HOWTO enable Telnet (port 23) and HTTPS (port 443) on the WAN port of the Airvana

    Note that it is only for the Airvana (sometimes called Airave 2.0).

    I do have a decoded javascript that was created by Zefie, who put this up on his page to help people to unblock Telnet & HTTPS through the two LAN ports of the Airvana:

    Click on this link to go to Zefie's Airvana unblock page

    Note that this page may not be able to be used immediately* once you get to it because the WAN port of the Airvana is completely blocked.

    (*Depending on your physical configuration.)

    Instructions are in my Sprint Community posting.

    The 'magic' of how Zefie's javascript works is by using PING injection.

    I haven't seen what MobiLinux looks like, so I don't know the location of where binaries are stored, but perhaps the decoded javascript I have may be able to be modified and compiled into one the Airave 1.0 can use, with some trial and error.
    12-17-2011 11:46 AM
  7. starnes892's Avatar
    Would pictures of the internals help with this hacking??
    01-06-2012 11:01 PM
  8. 0bitbucket0's Avatar
    I am attempting to install a new Airave in a location that cannot receive a GPS signal (think bomb shelter - that's why the Airave is needed in the 1st place!). Has anyone figured out how to spoof or disable the GPS requirement?
    07-20-2012 11:37 AM
  9. Mikey47's Avatar
    Can you root an Airave? I dont want to buy high speed internet... is there a way to root it so it will work off of my phones internet?
    Seriously? You want to use your phones Internet to be able to connect to an Airave so your phone can use it for phone calls?

    Do you know what an Airave is used for?
    07-20-2012 06:14 PM
  10. Downtown Taco's Avatar
    Can you root an Airave? I dont want to buy high speed internet... is there a way to root it so it will work off of my phones internet?
    Put the :beer: away kind sir.

    Sent from my SPH-D710 using Tapatalk 2
    07-21-2012 06:56 PM
  11. Ray Richland's Avatar
    @ Mike47, the mobile phone's data connection isn't the gateway, the microcell is. Microcells (e.g. airave) create a short-range cellular-band radio signal. Think of it as cell tower repeater. Mobile devices then get their internet FROM it.
    11-03-2012 07:23 PM
  12. femto_guy's Avatar
    Not quite rooted yet. Found the serial for each processor (x2) and can get output, but it's not allowing input and therefor can't break out of the boot loader. Anyone else had success yet?
    01-10-2013 03:19 PM
  13. biggjoe's Avatar
    No real luck yet. I'm on my 4th instance of Airave device, which happens to be version 2.5.

    So far, the only fun I've had with it, is logging in as Administrator and tweaking some of the features and disabling the built-in DHCP Server.

    BJ

    Sent from my Samsung Galaxy S3 using Tapatalk 2
    04-11-2013 12:14 AM
  14. Boysterload's Avatar
    I just disconnected my Airave 1.0 because Sprint sent me a new 2.5. Sprint said to just throw out the 1.0, but instead am looking for anything neat to do with it. Without a serial or console port of any kind, how can I get access to the 1.0? I'm not sure how I would get an IP from it. Could there be a web GUI?
    07-08-2013 04:50 PM
  15. Boysterload's Avatar
    This doesn't do much for me as I understand almost none of it, but here:

    Gaining root on Samsung FemtoCells
    07-08-2013 05:02 PM
  16. Almeuit's Avatar
    What would be the benefits of hacking it? Mine seems to work pretty good out of the box.

    Sent from my Sprint HTC One using AC forums.
    07-10-2013 12:59 PM
  17. skydve1's Avatar
    The biggest benefit I'd see from hacking it would be the ability to spoof the GPS. If it were possible, I could take the airave out of the country, plug it into the hotel's internet , and use my cell as if I was in the US.
    07-17-2013 09:40 AM
  18. jediknight36's Avatar
    see the Sprint Community thread:

    Sprint Community: Space: Airave

    My post on there is entitled:

    HOWTO enable Telnet (port 23) and HTTPS (port 443) on the WAN port of the Airvana

    Note that it is only for the Airvana (sometimes called Airave 2.0).

    I do have a decoded javascript that was created by Zefie, who put this up on his page to help people to unblock Telnet & HTTPS through the two LAN ports of the Airvana:

    Click on this link to go to Zefie's Airvana unblock page

    Note that this page may not be able to be used immediately* once you get to it because the WAN port of the Airvana is completely blocked.

    (*Depending on your physical configuration.)

    Instructions are in my Sprint Community posting.

    The 'magic' of how Zefie's javascript works is by using PING injection.

    I haven't seen what MobiLinux looks like, so I don't know the location of where binaries are stored, but perhaps the decoded javascript I have may be able to be modified and compiled into one the Airave 1.0 can use, with some trial and error.
    Any word on this progress? I just got my 2.5 and would love to spoof the gps instead of running the wire out. It sits close enough to the window for Airave 1.0 to get a lock, not this one. And as mentioned earlier, clouds and trees are a bother.

    And COULD the samsung airave 1.0 be used for other services, like Tmo, VZN, Metro, etc?
    And Id hate to trash something that works.
    neoberry99 likes this.
    07-20-2013 02:44 PM
  19. David Bidwell's Avatar
    Have you found anyway of changing the Network Name on the Airave to something other than Sprint. I would like to change this so I know I am on the airave
    06-19-2014 04:12 PM
  20. Almeuit's Avatar
    Have you found anyway of changing the Network Name on the Airave to something other than Sprint. I would like to change this so I know I am on the airave
    This would actually be a cool idea!

    Sent from my T-Mobile Note 3 using AC Forums.
    06-19-2014 06:32 PM
  21. droid-dev's Avatar
    What about hacking the Airave to work for another carrier? We have an Airave and I'm now on Verizon. I don't really want to go buy a $250 unit from them. Can the device be hacked to work for another carrier?

    The model I have is the Samsung AIRAVE SCS-26UC2.

    Thoughts?
    09-02-2015 11:17 PM
LINK TO POST COPIED TO CLIPBOARD