This captivating tale begins on AliExpress, where [Easton] discovered affordable WiFi extenders designed to plug directly into a power outlet for enhanced wireless coverage. Fascinated by this concept, [Easton] ordered multiple units and received them, eager to explore. Here’s a spoiler: while the first effort with the initial unit successfully initiated a console session through the UART port and allowed a root password reset, [Easton] accidentally damaged the extender while attempting to upload an OpenWRT image.
During the second attempt, using a different yet similar device, the outcomes were significantly more positive. The basic web interface didn’t offer an obvious entry point, but it revealed valuable information about the hardware inside the device [Easton] was working with. Aware of the potential risk of UART access causing another failure, [Easton] reviewed a security advisory that pointed out a vulnerability enabling remote code execution through a cleverly crafted SSID. This indicates that obtaining root access on these dongles can be accomplished by simply executing a straightforward curl command—no hardware modifications necessary!
As for the potential applications of these compact Linux WiFi devices, the opportunities are limited only by your creativity. We admire [Easton]’s suggestion of running something like Pi-Hole on them; setting up Home Assistant could also be a possibility, although these devices possess certain limitations in their functionalities. Nonetheless, the insights gleaned from this journey are invaluable, and at this price point, it’s an excellent time to enjoy.
