- Create a new user
- Generate and set a new password for the admin account
- Show the limited rights of the user in the webui
- Show equal privileges via SSH and trigger the diagnostic menu to display some register values
- Finally dump the encrypted hashes and decrypt the admin password which was generated at the beginning of the video.
Full writeup at jasper.la/exploring-zyxel-gs1900-firmware-with-ghidra.html