Crestron TSW 1060. POE HA dash for $30. Firmware

Hardware
184

TLDR you can mount the system partition on a linux machine and edit how they handle the ssh session to get a normal shell instead of the locked down crestron command line thing and start adbd.

For the following, the SD card in my machine is /dev/sda and the IP on my network is 10.1.66.5

Steps:

  1. Create a backup just in case
sudo dd if=/dev/sda of=backup.img bs=4M status=progress
  1. Mount partition 2
sudo mkdir /mnt/tmp
sudo mount /dev/sda2 /mnt/tmp
  1. Edit the file

Using the editor of your choice, open the file /mnt/tmp/bin/sshShell.sh
Find the line /system/bin/telnetSSHProxy SSH $1 and replace it with /system/bin/sh
save the file

  1. Cleanup etc

sudo umount /mnt/tmp

Reassemble the device, now once it starts up if you connect via ssh:

ssh [email protected]

you should get a normal shell

crestron@android:/ #

run start adbd

Now you can connect with adb

adb connect 10.1.66.5
adb shell

Should yield

root@android:/ #

Ideally we would be able to just enable adbd autostart but from my limited knowledge of how android works this is handled by files in the boot partition which is in a weird format on this device and I haven’t looked into it much.

2 Likes