Comfast E393AX upcoming github patches - Review

I mean, can you use the factory image as provided in the link, or does it have to be the read from the rom?

Here is the ROM image and the Backup file.
https://file.io/6AlHEXntRXVg

Hi, I manage to get in with ssh following the instructions here to set the ssh password to openwrt

BusyBox v1.33.2 (2023-07-14 03:55:24 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 21.02-SNAPSHOT, r0-7a78a51
 -----------------------------------------------------

root@COMFAST:/# df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/root                13824     13824         0 100% /rom
tmpfs                   115520       280    115240   0% /tmp
/dev/ubi0_2              38416       172     36244   0% /overlay
overlayfs:/overlay       38416       172     36244   0% /
tmpfs                      512         0       512   0% /dev
root@COMFAST:/# df -kh
Filesystem           1K-blocks      Used Available Use% Mounted on
df: �-kh: can't find mount point
root@COMFAST:/#
 root@COMFAST:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 08000000 00020000 "spi0.0"
mtd1: 00100000 00020000 "BL2"
mtd2: 00080000 00020000 "u-boot-env"
mtd3: 00200000 00020000 "Factory"
mtd4: 00200000 00020000 "FIP"
mtd5: 04000000 00020000 "ubi"
root@COMFAST:/#

the MTD backup is here. thanks
https://file.io/lAvOtYSaCDt9

Here is the correct /etc/shadow content incuding the third missing semicolon:
'root:::0:99999:7:::'

If you copy-pasted the wrong contents from the committed instructions you will be unable to login as root.

1 Like