未完成的文章！

image-20231111125431585

http://192.168.66.1/cgi-bin/luci/admin/system/security

image-20231111125746149

image-20231111125845764

image-20231111130204718

1
2
3
4
5
6
7
8
9
root@nradio:/tmp# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 08000000 00020000 "spi0.0"
mtd1: 00100000 00020000 "BL2"
mtd2: 00080000 00020000 "u-boot-env"
mtd3: 00180000 00020000 "factory"
mtd4: 00080000 00020000 "bdinfo"
mtd5: 00200000 00020000 "FIP"
mtd6: 04000000 00020000 "ubi"

./nc -l -p 3333 > bdinfo.bin

cat /dev/mtd4 | nc 192.168.66.202 3333

./nc -l -p 3333 > factory.bin

1
2
3
4
5
6
7
8
9
10
11
12
13
root@nradio:/tmp# mtd erase u-boot-env
Unlocking u-boot-env ...
Erasing u-boot-env ...
root@nradio:/tmp# mtd write /tmp/mt7981_nradio_c8-660-u-boot-web.fip FIP
Unlocking FIP ...

Writing from /tmp/mt7981_nradio_c8-660-u-boot-web.fip to FIP ...
root@nradio:/tmp#
root@nradio:/tmp# mtd write /tmp/immortalwrt-mediatek-mt7981-nradio_wt9103-squashfs-factory.bin ubi
Unlocking ubi ...

Writing from /tmp/immortalwrt-mediatek-mt7981-nradio_wt9103-squashfs-factory.bin to ubi ...
root@nradio:/tmp#

image-20231111130922449

image-20231111131202554

image-20231111131209340