|
发表于 2022-10-20 09:21:06
|
显示全部楼层
$ w5 @: p) N/ a) G2 ?结合以上道友的总结,最终指令:+ N* L% \6 ?- \7 G7 K# z
telnet 192.168.1.18 Z7 f& E* e1 r* J5 u
root
9 A6 n% ^/ a3 E& g: M& QHw8@cMcc 或者 adminHW
& w" C4 ^% i' ]/ Z# q9 _8 Q. |su (进入SU-WAP模式)9 X5 Y9 E3 r. f* @8 j: E% |
shell (进入WAP模式)
, c3 w, |8 Q2 b6 hcd /dev/shm (进入到SHM文件夹)
7 u9 P# l5 N. B; R6 S [% H; atftp -g -l mtd6.bin -r mtd6.bin 192.168.1.2 (新的mtdblock6在电脑上改名为mtd6.bin,然后上传到shm文件夹)
1 X; s# i# G4 i) y& Itftp -g -l hwmtd -r hwmtd 192.168.1.2 (把hwmtd软件上传到shm文件夹)' \: {4 ] I% s# t5 R
chmod +x hwmtd (给hwmtd授权)
" ]2 X+ G& `, d/dev/shm/hwmtd -u allsystemA (解锁allsystemA)
( x3 j2 P, y) U% ], pcat /proc/wap_proc/mtd_protect (看flag的值变成0x4400说明解锁成功)
9 W1 X) U1 H3 Ydd if=/dev/shm/mtd6.bin of=/dev/mtdblock6 (刷mtdblock6分区); }) U( {, t t% f4 {7 }
/dev/shm/hwmtd -l allsystemA (上锁allsystemA)+ a5 i. ?; a; o* L1 f! ^* m
exit (退出WAP模式回到SU-WAP模式)7 t# t# a% ~; \ O: t4 C2 U& ^
SU_WAP>display version (在SU-WAP模式下查看版本号)
- Y- M$ \8 s- P* z D( Q% ASU_WAP>display inner version (在SU-WAP模式下查看)5 x [2 ^% u, z3 C* m% Q, M1 `7 d
shell
5 V) d8 i0 _6 z% P3 r" lreboot |
|