Hack Transcend SDHC wifi (le système)

Grâce à l’activation du serveur telnet on peut récupérer les informations sur la carte:

$ telnet 192.168.11.254
Trying 192.168.11.254...
Connected to 192.168.11.254.
Escape character is '^]'.
 
# cat /etc/version.txt
Product Name     : KeyASIC WIFI-SD
Firmware Version : V147
Build Date       : 19 FEB 2013
Revision         : V147
WiFi Model       : Atheros AR6003 11n
Linux Kernel     : 2.6.32.28
Busybox          : 1.18.5

# cat /proc/cpuinfo
Processor       : ARM926EJ-S rev 5 (v5l)
BogoMIPS        : 421.06
Features        : swp half fastmult edsp java
CPU implementer : 0x41
CPU architecture: 5TEJ
CPU variant     : 0x0
CPU part        : 0x926
CPU revision    : 5
 
Hardware        : KeyASIC Ka2000 EVM
Revision        : 0000
Serial          : 0000000000000000
 
# busybox
BusyBox v1.18.5 (2013-02-25 15:18:08 CST) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.
 
Usage: busybox [function] [arguments]...
   or: busybox --list[-full]
   or: function [arguments]...
 
        BusyBox is a multi-call binary that combines many common Unix
        utilities into a single executable.  Most people will create a
        link to busybox for each function they wish to use and BusyBox
        will act like whatever it was invoked as.
 
Currently defined functions:
        ash, bash, boa, boa_indexer, bootchartd, bunzip2, buzzer, bzcat, cat,
        chmod, cmd_server, cp, date, df, dhcprelay, diff, dirname, dmesg, dnsd,
        dnsdomainname, dumpleases, echo, egrep, env, fgrep, find, fs_info,
        ftpd, ftpget, ftpput, gen_filelist, get_authfile, grep, hostname,
        ifconfig, inetd, init, insmod, instant_setupd, instant_upload,
        instant_upload_clean, iu_progressd, iwconfig, iwevent, iwlist, iwpriv,
        kcard_app, kcard_cmd, kcard_startup, kill, linuxrc, ln, logger,
        logread, ls, lsmod, macaddr, mkdir, mount, mv, nslookup, perl, ping,
        pkill, ps, pwd, readahead, rm, rmdir, rmmod, route, sh, sleep, sync,
        syslogd, tcpsvd, telnetd, thumbNail, thumbnail_video, touch, tscmd,
        tslist, udhcpc, udhcpd, udpsvd, umount, unzip, wget,
        wifi_connect_router, wifi_download, wifi_filelist, wifi_ftp_server,
        wifi_ftp_upload, wifi_get_apconfig, wifi_get_config,
        wifi_get_config_real, wifi_quick_send, wifi_set_config, wifi_upload,
        xargs