Reverse engineering a mobile hotspot

2018-09-17

During my university vacation, I was most of the time in a little village, where the only source of Internet comes from my phone. Previously, my family used a portable hotspot; more specifically, the Vodafone’s R216-z:

Vodafone R216-z

Meanwhile, we changed plans, and now we do not have a hotspot to take with us. However, during the vacations I thought that maybe, I could reuse the hotspot to create a mobile personal network, where I could connect the Raspberry Pi server and then work, with all the conveniences of having a “remote” git repo, or IRC chat, etc.

So, I went looking for the R216-z, and started messing around it. Some notes:

The biggest limitation for me is the point number 4, because it means I cannot know what is the IP address of the server. One way to get that information is through AJAX requests, but I could not find any documentation regarding endpoints and possible requests. So, I intend to comb through a 1000+ lines of Javascript spaghetti to find and document those endpoints. Also, I’ll see what is possible to do about the SSH access, it would be sweet to gain direct access to the OS.