AirBox
Full control of a home 4G router from your phone, through an API it never published.
Overview
The router only had a clunky web panel. I mapped its undocumented API from live traffic and the panel's own code, then rebuilt its controls as a clean mobile app.
Under the hood
The features that took real engineering
- 01
Mapping an undocumented API
Every read and write command was documented from captured traffic and the decompiled web panel, for routers from more than one vendor.
- 02
Its login, reproduced
The app reproduces the router's challenge-response login (session nonce, salted hashing, token rotation) and handles attempt limits and lockouts.
- 03
A proxy that avoids network conflicts
A local routing proxy binds to a specific network interface to get around LAN conflicts and inspect traffic while mapping the API.
- 04
Everything the panel did, and more
Wi-Fi profiles, MAC filtering, SMS inbox, USSD shortcodes, reboots, and QR codes for sharing Wi-Fi.
Screens
Live data, signal, battery and devices 
Both Wi-Fi networks, on and off with one tap 
A guest network that switches itself off 
Who is connected right now 
The SIM inbox on your phone 
USSD codes with the carrier menu as buttons 
Signs in with the router password