怎么补全shell，本人纯小白
大佬太牛了，膜拜
slitilanber 发表于 2025-10-21 17:25
这个shell命令实际上在equipment.tar.gz/wap/hw_shell_cli.xml文件内，明文指定开放哪些shell命令。
理论 ...
比较专业，可做参考测试
本帖最后由 HN8145X6-tester 于 2026-3-30 06:26 编辑
interesting cmd it lets map areas of new firmware protected bootloader.. newer firmwares R022,R023,R024 have protection with AESCRYPT2but this cmd shows some information
SU_WAP>display file /proc/mtd
dev: size erasesizename
mtd0: 00100000 00020000 "bootcode"
mtd1: 07f00000 00020000 "ubilayer_v5"
mtd2: 0001f000 0001f000 "flash_configA"
mtd3: 0001f000 0001f000 "flash_configB"
mtd4: 0001f000 0001f000 "slave_paramA"
mtd5: 0001f000 0001f000 "slave_paramB"
mtd6: 02c14000 0001f000 "allsystemA"
mtd7: 02c14000 0001f000 "allsystemB"
mtd8: 0001f000 0001f000 "wifi_paramA"
mtd9: 0001f000 0001f000 "wifi_paramB"
mtd10: 00117000 0001f000 "keyfile"
mtd11: 01d8c000 0001f000 "file_system"
success!
also insied telnet.bin there is a script duit9rr.shcontains following information..
tried adding more code, but it fails updload via web menu..