Collected observations.

Mapping CGI authentication, WTP, remote administration tunnels, and traffic flows on the Pepwave Balance 1350, with the full reverse-engineering record.

Investigating OpenWrt authentication, configuration decryption, RIP, MTD/NVRAM, and device-key derivation, including experiments and unresolved boundaries.

Analysis of three command injection vulnerabilities, from Telnetd argument handling to router HTTP interfaces, with code and experimental evidence.

Tracing RGOS firmware extraction, HTTP services, Lua handlers, and authentication flows, with decompiled code, debugging records, and original screenshots.

Following historical CVEs, the firmware filesystem, and HTTP request handling to investigate DSR-250N overflow candidates and document the debugging process.