enable telnet
login as admin
http://192.168.2.127/r38571,/adv,/cgi-bin/remote_help-cgi?type=backdoor
telnet 192.168.2.127
root
YOUR_PASS
USB TTL to NSA-320
NSA325: http://dl.panticz.de/zyxell/tty_nsa325.jpg
NSA320: http://dl.panticz.de/hardware/zyxel_nsa320/nsa320_usb_ttl.jpg
install ssh
wget ftp://ftp.zyxel-tech.de/2.new_mirror/NSA310/4.40/zypkg/web_prefix -O /i-data/d154583a/admin/zy-pkgs/web_prefix
# firmware / package / reload
# install ffp
/i-data/d154583a/admin/zy-pkgs/ffp/ffp.log
ZyXEL NSA320
https://forum.doozan.com/read.php?2,88619
Update uboot
http://forum.doozan.com/file.php?3,file=160,filename=kwboot-tool.tar.gz,download=1
download: https://bitly.com/1W6D2pd
dhcp
tftpboot 0x800000 uboot.2017.07-tld-1.nsa325.mtd0.kwb
nand erase 0x0 0x80000
nand write.e 0x800000 0x0 0x80000
reset
Create USB boot disk
download: https://bitly.com/3zCSrnC
DEVICE=/dev/sdc
sudo umount ${DEVICE}*
sudo parted ${DEVICE} -s rm 1
sudo parted ${DEVICE} -s mklabel msdos
sudo parted ${DEVICE} -s mkpart primary ext3 0% 100%
sudo mkfs.ext3 ${DEVICE}1 -F -L rootfs
sudo mount ${DEVICE}1 /mnt
sudo tar xjf Debian-5.13.6-kirkwood-tld-1-rootfs-bodhi.tar.bz2 -C /mnt/
sync
sudo umount ${DEVICE}1
Boot from NAND (optinal)
https://forum.doozan.com/read.php?2,12096
download: https://bitly.com/3zCSrnC