An interactive python script that enables root access on the T-Mobile (Wingtech) TMOHS1, as well as providing several useful utilites to change the configuration of the device.

• Root shell via telnet
• Temporarily or pesistently enable ADB
• Disable OMA-DM update bootstrap
• On-device root FTP server to browse the filesystem
• Mood lighting
• Mask data that would normally be counted against your hotspot quota as "on-client-device" data

• SIM unlock :(
• SSH server installation
• Other USB modes (though if you edit utils.py you can easily implement this)

Ensure you have Python >= 3.6 and pip installed then run:

pip install -r requirements.txt

Or install the required libraries manually.

Connect to your hotspot's network via USB tethering (recommended) or WiFi, then run:

python ./rootScript.py

Or for verbose/debug output:

python ./rootScript.py -v

• The script has been tested to work on Windows 10 & 11, EndeavorOS Linux, and MacOS 13 Ventura
• Script assumes your hotspot's IP is 192.168.0.1
• Script assumes you have set a custom weblogin password, i.e. you have changed it from the default AdminXXXX
• For the sake of your own experimentation, the script leaves an unauthenticated root FTP server running on the device but only once you enable it. When you are done browsing the filesystem, be sure to manually close it by running killall tcpsvd on the TMOHS1 as root, or simply reboot the device.
• You can build custom binaries to run on the rooted device as well as a portable cross-SDK with this custom Buildroot fork. Note that this is very experimental, and I cannot guarantee it will build/run properly, however.