记录一下
python官网:
https://www.python.org/
Xiaomi Mi Router 4C openwrt官网教学
https://openwrt.org/toh/xiaomi/xiaomi_mi_router_4c#info
命令
ssh阶段
pip install -r .\requirements.txt
python .\remote_command_execution_vulnerability.py
第二阶段
telnet 192.168.31.1
dd if=/dev/mtd0 of=/tmp/root/all.bin
dd if=/dev/mtd1 of=/tmp/root/bootloader.bin
dd if=/dev/mtd3 of=/tmp/root/eeprom.bin
dd if=/dev/mtd7 of=/tmp/root/OS1.bin
ftp://192.168.31.1
openwrt官方教程分支
mtd -r write /tmp/
OS1
openwrt+breed教程分支
mtd -r write /tmp/
Bootloader
py -m http.server
wget
telnet 192.168.1.1
flash erase 0x160000 0xea0000
flash write 0x160000
autoboot.command
boot flash 0x160000
Comments NOTHING