HR8145XR V5R022C10S268通挂从光猫固件，半补全shell

opesfrp

怎么补全shell，本人纯小白

sempronlun

大佬太牛了，膜拜

liyong228

slitilanber 发表于 2025-10-21 17:25
这个shell命令实际上在equipment.tar.gz/wap/hw_shell_cli.xml文件内，明文指定开放哪些shell命令。

理论 ...

比较专业，可做参考测试

HN8145X6-tester

interesting cmd it lets map areas of new firmware protected bootloader.. newer firmwares R022,R023,R024 have protection with AESCRYPT2  but this cmd shows some information


SU_WAP>display file /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00020000 "bootcode"
mtd1: 07f00000 00020000 "ubilayer_v5"
mtd2: 0001f000 0001f000 "flash_configA"
mtd3: 0001f000 0001f000 "flash_configB"
mtd4: 0001f000 0001f000 "slave_paramA"
mtd5: 0001f000 0001f000 "slave_paramB"
mtd6: 02c14000 0001f000 "allsystemA"
mtd7: 02c14000 0001f000 "allsystemB"
mtd8: 0001f000 0001f000 "wifi_paramA"
mtd9: 0001f000 0001f000 "wifi_paramB"
mtd10: 00117000 0001f000 "keyfile"
mtd11: 01d8c000 0001f000 "file_system"

success!



also insied telnet.bin there is a script duit9rr.sh  contains following information..

tried adding more code, but it fails updload via web menu..