路由器通电,网线连接到1号口方便等下进入uboot。浏览器输入192.168.31.1简单配置并进入后台,在系统升级处降级到系统版本:1.1.47稳定版
在地址栏得到你自己的 stok,在桌面创建个 stok 的记事本,将 stok 粘贴记住
将下面5行命令复制粘贴到刚刚的记事本,用你自己的stok替换下面5行中的PUT_TOKEN_HERE
部分
<http://192.168.31.1/cgi-bin/luci/;stok=TOKEN/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%0anvram%20set%20ssh_en=1%0anvram%20commit%0a>
http://192.168.31.1/cgi-bin/luci/;stok=TOKEN/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%0aecho%20sed%20-i%20's/channel=.*/channel="debug"/g'%20/etc/init.d/dropbear%20>%20/tmp/r.sh%0ash%20/tmp/r.sh%0arm%20/tmp/r.sh%0a
<http://192.168.31.1/cgi-bin/luci/;stok=TOKEN/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%0a/etc/init.d/dropbear%20start%0a>
<http://192.168.31.1/cgi-bin/luci/;stok=TOKEN/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%0a/etc/init.d/dropbear%20enable%0a>
http://192.168.31.1/cgi-bin/luci/;stok=TOKEN/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%0aecho%20echo%20-e%20"root\\nroot"%20|%20passwd%20root%20>%20/tmp/pass.sh%0ash%20/tmp/pass.sh%0arm%20/tmp/pass.sh%0a
如图,这样用记事本进行替换,直观明了
将替换后的5个命令分5次输入到导航栏,5次都是得到code:0
用finalshell之类工具登入路由器,账号和密码都是root
输入下列设置 env 的命令(可以全部复制直接粘贴过去,回车运行,回车多按没事,我没事就喜欢按几次😂)
nvram set flag_last_success=0
nvram set flag_boot_rootfs=0
nvram set boot_wait=on
nvram set uart_en=1
nvram set telnet_en=1
nvram set ssh_en=1
nvram set bootdelay=2
nvram commit