F663nv9 TTL找密码

zhang260gt

到这了：然后呢？晕了
' c/ R! G/ v' F" w( g0 x?       - alias for 'help'
) k! N' @3 I  o) mautorun - start version
base    - print or set address offset
bdinfo  - print Board Info structure
: c6 S5 h7 d& i' E4 }$ C9 E2 }boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootk   - boot kernel
bootm   - boot application image from memory
& y7 ~# _8 K6 M3 d( P6 abootz   - boot Linux zImage image from memory
cmp     - memory compare
" O1 w# c+ b1 d9 L8 t6 \coninfo - print console devices and information
; ~( c" ?* `& Lcp      - memory copy
dhcp    - boot image via network using DHCP/TFTP protocol
% l1 U$ N0 w9 y$ P6 W3 P1 }downver - upgrade software downloaded from TFTP server
3 g& d8 w4 ^% x3 Kecho    - echo args to console
fdt     - flattened device tree utility commands
; V$ y6 U2 j6 |- ]3 \& ]; N# wfsinfo  - print information about filesystems
fsload  - load binary file from a filesystem image
  y2 F% |* B& G  dgo      - start application at address 'addr'
: u, R5 k+ g6 @& h( d2 e8 {gpiotest- gpiotest dir [num] [in/out]
gpiotest value [num] [1/0]
- z! P% L' v8 @2 bgpiotest gvalue [num]
help    - print command description/usage
imxtract- extract a part of a multi-image
itest   - return true/false on integer compare
/ s& |* L: i( q& J5 M2 vls      - list files in a directory (default /)
" z  O0 P1 F3 B3 F6 u; a6 X6 omd      - memory display
& z5 `5 f' g4 v: Xmii     - MII utility commands
mt      - memory test
mtddebug- mtddebug operate
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
2 B- `3 \! c& {( Y: lsetenv  - set environment variables
9 K/ _3 A& [2 a- P) {4 Msleep   - delay execution for some time
tftp    - boot image via network using TFTP protocol
& M6 k1 o  n7 l3 {1 F" k/ Eversion - print monitor, compiler and linker version
8 ]9 F$ `  s2 ]; \9 h! W" Cwatchdog- watchdog reset && disable
, ], o9 J4 }) {( h) j, Rxmodem  - xmodem
. k( L5 J! N/ U=>
2 T4 a! l$ U& T+ P
. E7 k6 F2 R( u9 i% P3 Q/ A

zhang260gt

=> ls
addr=1a00000
) G8 t2 v" f/ O/ B4 {" H  g0 xaddr=3a00000
$ Y5 B8 C" S6 u. k
---mtdparts_init--current_mtd_partnum=0-
dev id: type = 2, num = 0, size = 0xffffffff, mtd_id = single part
( \( C- u+ v/ V* e1 `6 E9 opart  : name = rootfs0, size = 0x01b00000, offset = 0x01a20000
part  : name = rootfs1, size = 0x01b00000, offset = 0x03a20000
& ~* K/ J) P& q$ l) v; A& A: h
--- jffs2_part_info: partition number 0 for device nand0 (single part)
, S) p: }  M# U; v5 P/ B% S+ ajffs2_part_info:rootfs0,1a20000
1 h% y  Z+ j0 R3 B6 l' l# ~rootfs0,1a20000
. S) l; Y7 O7 Q1 iScanning JFFS2 FS: ................. done.
: u7 d9 @* G$ U& k -rw-r--r--  4294775 Wed Oct 21 07:12:19 2020 0uImage
2 X* v, j3 n# v$ B  D3 H- w- ]& J( [ drwxr-xr-x        0 Wed Oct 21 07:12:19 2020 bin
$ {7 _. g$ o/ T& `! w drwxr-xr-x        0 Wed Oct 21 06:54:08 2020 dev
) Y0 Z  W( B' w drwxr-xr-x        0 Wed Oct 21 07:12:19 2020 etc
5 g$ a: j. |' ]% |0 ]  o( K2 M drwxr-xr-x        0 Wed Oct 21 07:11:55 2020 home
-rwxr-xr-x       66 Wed Oct 21 06:54:07 2020 init
2 m3 n0 j8 X+ t% ~+ a% H6 x- O drwxr-xr-x        0 Wed Oct 21 07:12:19 2020 kmodule
6 O0 s9 ?  E! s6 F& z1 P% E$ T drwxr-xr-x        0 Wed Oct 21 07:12:19 2020 lib
lrwxrwxrwx       12 Wed Oct 21 07:05:28 2020 linuxrc -> /bin/busybox
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 mnt
  b0 w, A, X4 y6 x- S drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 proc
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 root
drwxr-xr-x        0 Wed Oct 21 07:12:19 2020 sbin
7 u3 f) m" d) ]' B; A2 |& l9 C drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 sys
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 tagparam
+ |7 w! x6 I! A* Q  _+ K/ ^ lrwxrwxrwx        3 Wed Oct 21 06:54:07 2020 temp -> tmp
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 tmp
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 upgtempfile
  L* O4 o, G* S drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 userconfig
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 usr
4 q; ^% U/ ]! h! l- O  \8 N# G drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 var
drwxr-xr-x        0 Wed Oct 21 06:54:07 2020 wlan
=>

zhang260gt

Hit 1 to upgrade software version
Hit any key to stop autoboot:  3
( p& x' v, F1 M) p6 t, P这个Hit 1 没有意义：不论你Hit什么都是到=>
好象ls命令也被阉割了
求助！！！

zhang260gt

& \" S! }* Z/ r- a=>
: ^& P& {7 W# o$ i
: d7 t0 N1 n) m" H3 W: z: e! Fprintenv
3 V; n3 Y, b* R6 \! u/ L' ^baudrate=115200
; B' ?7 A% }( f7 }& O! ~bootcmd=setenv bootargs console=$(console) root=/dev/mtdblock12 ro rootfstype=jffs2  mem=$(memsize);bootm 0x44000000;
bootdelay=1
) d5 }. w& r2 W7 P% }bootfile=uboot.bin
1 I! l$ E' |3 {8 ?) a& m8 obootloaderfile=bootloader.bin
# O2 X0 w" P8 L# s2 ]4 vconfigfile=zxic_pubconfig.bcb
console=ttyAMA0,115200n8
3 b3 U8 s! I7 l# ?; Q% m+ qethact=eth0
2 y9 i7 g( m% N4 t: W2 w$ d( nethaddr=00:41:71:00:00:50
; X( g# e0 z2 S" d# U$ o! ^: \8 vfilesize=418877
( W% H: t, H& I9 _% p! }fullfile=upgrade.bin
! t' h7 i! j  H# S. Q. Vgatewayip=192.168.1.1
hostname=unknown
ipaddr=192.168.1.1
linuzfile=vmlinuz.bin
loadaddr=0x42000000
& F3 ~* ?% O  V7 e  o" I/ |, ?1 gmemsize=256M
* [4 R# T, W% L# J' c+ u  v1 r0 pnetmask=255.255.255.0
netretry=5
4 c* k( k. X. O' a* l( Lserverip=192.168.1.100
stderr=serial
stdin=serial
- ]! F7 k  v7 J$ F6 {stdout=serial
versioninfo=U-Boot V1.1.0 20200922031856 0x1a00000 0x0 0x8f 0x82
" B& B5 T% d1 w+ L& t
Environment size: 649/131068 bytes
=>

zhang260gt

7 Y3 V1 s: N( G. z
' R; p& v3 ?) t4 t

709508002

直接把密码改回来

zhang260gt

709508002 发表于 2022-2-9 12:38
直接把密码改回来

WEB:user没有密码直接登陆
TTL：也没密码直接到uboot

zhang260gt

不找密码了，直接开Telnet破解了，写贴中.....

九州震旦

这是新的干货，马克一下，以后遇到可以学习

nanyao

学习一下