|
|
楼主 |
发表于 2026-3-26 22:25:40
|巴拿马|
显示全部楼层
/ R% W- d1 R# D3 U, z/ Tfirmware can be flashe via TFTP, firmware dump made with TFPD via cat /proc/mtd
* n1 z' i& b. m. f- ~2 z2 G( H% b
1 p' f5 `+ W5 j; Ito flash firmware back to device, can use similar cmds depending on firmware version
; V* A. t* T7 ?9 g* Q
0 {$ v9 @. x( m7 V1 `! w! F
+ @" x0 b+ k- z/ F" a |cd /dev/shm" W# C) P+ Y" r& C4 c
1 ^% W3 c% u) b1 s1 b) M
tftp -g -l hwmtd -r hwmtd 192.168.100.10 . _& s [' [" l( x0 M$ a& d
. k; p, S6 `; j b7 s
chmod 777 hwmtd
! i" o! M# v% t% N$ {# z6 Y' x0 [% H9 Z
./hwmtd allsystemA
6 c. a1 m4 f3 R& Y+ w9 I./hwmtd allsystemB
$ B) M6 F, S3 g( N) W @5 d6 @. R./hwmtd apps" i; d7 {7 K! D: r# X. [) E& s
./hwmtd file_system
* [! ?! H% D' U' u2 i+ U3 `) z' ]./hwmtd flash_configA
1 W. i7 E6 i+ S4 `& K./hwmtd flash_configB % p# p3 s6 s: C4 g5 }
./hwmtd frameworkA* y9 i% n2 F6 D9 _& A @4 }
./hwmtd frameworkB
2 H) ]( Q' e& Z./hwmtd keyfile0 M% z8 \# b( s8 {. B" }2 m
./hwmtd slave_paramA ) S2 m: Y9 p6 {: d. d5 I$ B
./hwmtd slave_paramB5 C J f Y) W
./hwmtd ubilayer_v5
. x+ M% g" D2 w( ^./hwmtd wifi_paramA
! V8 X' @" Z- m./hwmtd wifi_paramB 2 B* |+ B9 G, h8 K U- j2 H
, D3 T) Q. b) l: z5 J, W. X4 y" T
1 e; z* Y3 L6 N# Gtftp -g -l mtd0.bin -r mtd0.bin 192.168.100.10
, `2 r% }+ v/ e6 ctftp -g -l mtd1.bin -r mtd1.bin 192.168.100.10
7 A! b& C7 S# q: ^; Ytftp -g -l mtd2.bin -r mtd2.bin 192.168.100.10
$ t$ O9 f$ ^% t% ]2 k/ n# xtftp -g -l mtd3.bin -r mtd3.bin 192.168.100.10 4 Y. p9 p8 P6 M3 q3 j
tftp -g -l mtd4.bin -r mtd4.bin 192.168.100.10
& Y- f8 X/ b% g9 `: A* E5 Utftp -g -l mtd5.bin -r mtd5.bin 192.168.100.10 . s3 C5 g3 @+ ]+ r$ S/ C Q/ w
tftp -g -l mtd8.bin -r mtd8.bin 192.168.100.10
; B! ?1 M. J6 L* {tftp -g -l mtd9.bin -r mtd9.bin 192.168.100.10
5 t7 t3 O& ?. M# stftp -g -l mtd10.bin -r mtd10.bin 192.168.100.10
0 N0 X/ b6 @, n% ]8 Ctftp -g -l mtd11.bin -r mtd11.bin 192.168.100.10
. Y1 k; @% D1 a3 h9 Ptftp -g -l mtd12.bin -r mtd12.bin 192.168.100.10 9 f L# J( B7 u5 s, `
tftp -g -l mtd13.bin -r mtd13.bin 192.168.100.10 + {2 T ^+ p1 \5 l$ T
tftp -g -l mtd14.bin -r mtd14.bin 192.168.100.10
( P$ B9 { o4 L) L
$ x5 x& ~! S) N
% @- f. G; z: `* S$ e7 y; E# ^! r+ U9 {* s9 M
dd if=/dev/shm/mtd0.bin of=/dev/mtdblock0
! v) T) i! \; h- odd if=/dev/shm/mtd1.bin of=/dev/mtdblock1 9 q' E% ?1 {! c7 ]# G
dd if=/dev/shm/mtd2.bin of=/dev/mtdblock2
+ s2 v1 x l# z; ?& ]8 Z1 i$ Edd if=/dev/shm/mtd3.bin of=/dev/mtdblock3 . b) n1 @$ K7 r' v
dd if=/dev/shm/mtd4.bin of=/dev/mtdblock4 ! e) c# i7 S/ e2 y/ V/ y
dd if=/dev/shm/mtd5.bin of=/dev/mtdblock5
7 U2 n% G C$ p# Z8 V ], x, \) B0 zdd if=/dev/shm/mtd6.bin of=/dev/mtdblock6 ) g# { J: E2 g2 Y3 U0 J
dd if=/dev/shm/mtd7.bin of=/dev/mtdblock7
6 `8 `( ^6 z; Xdd if=/dev/shm/mtd8.bin of=/dev/mtdblock8
2 B9 v2 l4 Y1 e% L# udd if=/dev/shm/mtd9.bin of=/dev/mtdblock9 + n9 h, \$ c. a x) _7 V
dd if=/dev/shm/mtd10.bin of=/dev/mtdblock10
( M' B2 Y Y5 l7 V8 Gdd if=/dev/shm/mtd11.bin of=/dev/mtdblock11 / g2 u" ^9 Y* [& y( e
dd if=/dev/shm/mtd12.bin of=/dev/mtdblock12 + F. O+ M. @) i+ M9 \: a4 {
dd if=/dev/shm/mtd13.bin of=/dev/mtdblock13 : I' e6 C# ?% g& A" h
dd if=/dev/shm/mtd14.bin of=/dev/mtdblock14
7 m) M% T& ?3 f) Q4 J# Z" A9 k1 z
4 G, g7 u2 X+ @$ `" j
8 X0 k+ F2 ]- X1 u4 J b7 v& F: p
$ J J& g- J r( P
- P; m: n$ }+ j0 I- ~1 X; C+ ~8 h' T4 b% p+ N) ^, q; Y
tftp -g -l hwmtd -r hwmtd 192.168.100.2. @0 Y' B+ N) N0 ]. g/ D8 s# F
# e/ F, `1 a) g4 {, _
chmod 777 hwmtd
. \7 Q6 h( b- e! k6 }7 H3 p1 H) ?- `8 x* r* W& L$ R" M* K. k
./hwmtd -u apps( r `$ G9 [; Z& R+ X5 ?
- F% L3 d# M0 Q! A! d
./hwmtd -u allsystemB
1 D: n _ E) I9 Y" P: p % T5 S, c+ l: t
tftp -g -l mtd14.bin -r mtd14.bin 192.168.100.2 1 _ y' O! v# f2 x% M1 ?
5 M% J8 c$ h7 ?" {6 v+ L5 T
dd if=/dev/shm/mtd14.bin of=/dev/mtdblock14
. \% C- F! E# V # ~0 m! t/ \; @0 d8 @% X
dd if=/dev/shm/mtd6.bin of=/dev/mtdblock7
: J0 B$ ]6 a' d% S6 W1 M; b* ?
d4 B- q/ W* _+ T0 X, x
, B. Z% J' S7 u2 } g4 x1 `
! c+ t9 N" E6 _ M$ R8 q3 y. }1 Q" P
. U! c. v- Y* F/ N
/ z6 u) B* _8 j1 k+ P' m' t# ?' l
|
|