Cant install openwrt 4A gigabit

configer · January 23, 2024, 8:46am

hi
i cant install openwrt on router xiaemo 4a gigabit china
plz see pic

frollic · January 23, 2024, 8:56am

did you consult the link on the screen ?

andyboeh · January 23, 2024, 8:57am

According to the Wiki, there are multiple versions. Which one do you have?

configer · January 23, 2024, 9:10am

system version is 2.30.28

configer · January 23, 2024, 9:10am

ues but not understanding

frollic · January 23, 2024, 9:13am

does the sticker by the QR code say DVB4218CN ?

andyboeh · January 23, 2024, 9:13am

As v2.30.20 is unsupported by the exploit, it's very likely that 2.30.28 is unsupported as well. See here.

configer · January 23, 2024, 9:31am

What is the solution?

configer · January 23, 2024, 9:32am

when scan
just download wifi app

RadioOperator · January 23, 2024, 1:04pm

here, maybe help:

github.com/acecilia/OpenWRTInvasion

Exploit scripts for the V2 of the Router with Firmware 2.30.20

acecilia:master ← LordPinhead:master

opened 10:20PM - 30 Oct 22 UTC

LordPinhead

+272 -108

Setup I used is router IP 192.168.31.1, computer IP 192.168.31.2, Password for t…he webinterface is 12345678, these are the default values. The exploit is based on [vanyasem](https://github.com/vanyasem) (https://github.com/acecilia/OpenWRTInvasion/issues/141#issuecomment-1296033775) findings and his comment in issue 141. Start remote_command_execution_vulnerability_v2.py with python3, this will ask for the router ip, the local ip and the webinterface password (default values are set), then it will pack a payload like before, a bootstrapper and it will be injected into the set_config_iotdev url. Basically, remote code execution. It needs the dropbear and busybox executable plus the script. Because it was so different, I made a new python script and a new bash script. Now, with root access, the router is also open for OpenWRT.

configer · January 24, 2024, 11:00am

i can change firmware on router??

frollic · January 24, 2024, 11:04am

if you find a working exploit, you can.

RadioOperator · January 24, 2024, 11:05am

yes.
if you still in v2.30.28, you can "update" back to 2.30.20.

configer · February 12, 2024, 10:12am

how this??

RadioOperator · February 12, 2024, 10:45am

I do not have the V2 router, you try to google it, maybe v2.30.25

hax · April 5, 2024, 4:51pm

this exploit works for me same model. But now I'm not sure which openwrt I should install

github.com/acecilia/OpenWRTInvasion

Exploit scripts for the V2 of the Router with Firmware 2.30.20

acecilia:master ← LordPinhead:master

opened 10:20PM - 30 Oct 22 UTC

LordPinhead

+272 -108

Setup I used is router IP 192.168.31.1, computer IP 192.168.31.2, Password for t…he webinterface is 12345678, these are the default values. The exploit is based on [vanyasem](https://github.com/vanyasem) (https://github.com/acecilia/OpenWRTInvasion/issues/141#issuecomment-1296033775) findings and his comment in issue 141. Start remote_command_execution_vulnerability_v2.py with python3, this will ask for the router ip, the local ip and the webinterface password (default values are set), then it will pack a payload like before, a bootstrapper and it will be injected into the set_config_iotdev url. Basically, remote code execution. It needs the dropbear and busybox executable plus the script. Because it was so different, I made a new python script and a new bash script. Now, with root access, the router is also open for OpenWRT.

flash it with this openwrt version:

https://archive.openwrt.org/releases/23.05.2/targets/ramips/mt7621/openwrt-23.05.2-ramips-mt7621-xiaomi_mi-router-4a-gigabit-v2-squashfs-sysupgrade.bin

it works like a charm!

frollic · April 5, 2024, 5:06pm

23.05.3 is out, you might consider upgrading.

configer · May 11, 2024, 10:39pm

now i upgrade version to 2.30.500
maybe can install open wrt now?