thank you for these details, I will test this tonight, and give you feedback
Hello,
Can you reupload the ubifs for ax3600?
I tried to extract it but it didn't work for me (after I extracted the ubifs from the bin file)
I think you should ask this at AX3600 topic. Someone will help you.
Please clarify, do you have a guide in English to install Breed on Xiaomi Redmi Router AC2100? In Russian forum 4pda is unfortunately proposed unsafe file 键开启telnet.bat to install Breed.
First of all, thank you very much for your work! I have been following the thread since the output of the Xiaomi AC2100 (black cylinder). I finally have OpenWrt!
I am a new user in this, I have been investigating but I do not understand once openwrt is installed ... how is its firmware updated? From the web I do not understand it, nor do I know what target I have. How do I look at your target? How do I update it?
Also I wanted to install luci-app-qsm but not leave me due to incompatibility with the kernel, any option? I'm interested in games. Thank you! I hope to see myself explained well.
why you still need it? You can just get ssh access and do what you want!
Yes I still want it,
I just want to poke around in it, but I didn't manage to extract it.
I could ssh into the router directly, but I would like to have the Kali linux tools to look into it better.
Hi,u can use ubi_reader to extract the ubi format images
Yes,
That's exactly what I used and it says it can't do it because the end offset is larger than the file size. or something along those lines.
English instructions for breed installation on R2100 or AC2100.
Following this instructions probably will void warranty. I hold no responsibility if it goes wrong and you brick your device.
The file used is the one for Xiaomi Router 3G, it works well on R2100 and AC2100
Get ssh or telnet access. You can use provided guide. If you have DD-DWT or OpenWRT installed just connect with terminal.
type in the following commands:
cd /tmp
wget --no-check-certificate https://breed.hackpascal.net/breed-mt7621-xiaomi-r3g.bin
mtd write /tmp/breed-mt7621-xiaomi-r3g.bin Bootloader
You can verify the MD5 if you wish before the mtd write with:
md5sum /tmp/breed-mt7621-xiaomi-r3g.bin
if the "--no-check-certificate" doesn't work for you, remove it from the command.
If you have DD-WRT like Padavan installed, use
mtd_write write /tmp/breed-mt7621-xiaomi-r3g.bin Bootloader
or
mtd_write2 write /tmp/breed-mt7621-xiaomi-r3g.bin Bootloader
instead of regular mtd
After flashing breed you have to boot to breed and set it to boot kernel1 partition.
Otherwise the router will boot loop. You can still enter breed when it's in boot loop.
To enter breed do the following: Pull power out. Press reset button, and while pressing - reconnect back the power connector. Keep pressing 3-4 more seconds. Access breed at 192.168.1.1.
Type the following in to the breed terminal:
env set autoboot.command "boot flash 0x600000"
env save
or set it in GUI.
1 Like
It seems that I can't. It doesn't accept my password, and not letting me register new user. Tried several times during the day...
In seeing your instructions, i'm sure i don't have breed installed on my rm2100.
Thank you for your guide!
Supports redmi stock firmware by default ssh or telnet access?
I don't recall having ssh or telnet on stock. Isn't the whole point of the patch is to get telnet?
Please clarify for redmi stock firmware, can I use your guide to get ssh or telnet access for installing breed?
Hello,
I just tested reboot with reset buton hold.
I see in the console dhcp requests waiting for IP address.
When the router is connected to my adsl Box, it tries to get TFPT .bin file.
If I configure a TFTP server and a DHCP server on my computer, will I be able to get my router in stock version?
Thanks for your answer
To get telnet access on stock with patch, you need to follow the official guide. Then before writing the OpenWRT files, write breed. If you run local file server for the flashing, it's best to use it to store breed-mt7621-xiaomi-r3g.bin as well. Then you can wget it faster.
You probably don't have to write OpenWRT at all, and do it later with breed. If you keep stock you should not change the autoboot.command value. I don't think anyone did it before, hope it works.
1 Like
The AC2100 and r2100 are very similar to r3g router. There are few users that were able to get out of soft brick: here is one, here is one post suggesting:
with the stock bootloader , you just have to download official firmware, rename it to miwifi.bin, unplug mains,plug usb, press reset until i say so, plug mains , keep presing reset until led flashes orange , leave reset button, wait until led is blue. and your router is recovered
You may try putting the file (instead of USB) on TFTP server and sending it to bootloader.
By the way, debricking AC2100 / R2100 should have it's own topic IMHO.
@emirefek
The images you posted are great.
You can get 19.07 images from here:
https://drive.google.com/folderview?id=13mTGEswOK_YABMWrE8TbLoKqCgCqTEmL
I'm running it for a while and it works flawlessly for me.
Thank you very much, your work is very appreciated!
Thanks a lot but there is many guys which need to take more thank then me. First @ namidairo @ scp07 @ ilyas @ thorsten97 @ Percy. Thanks to all of them.
(I leaved space because don't wanna send them unurgent notification mail)
Btw you can get latest compiled image and stock(exploit version) from this URL this will stay forever. https://drive.google.com/folderview?id=13mTGEswOK_YABMWrE8TbLoKqCgCqTEmL
And I'll be glad if you edit wiki pages tftp recover section with improved and easy to understandible guide for clueless user. That will help a lot if you wanna contribute.
1 Like
Сan I follow below mentioned instruction to install breed?
cd /home/user
wget /home/user/breed-mt7621-xiaomi-r3g.bin
mtd write /home/user/breed-mt7621-xiaomi-r3g.bin Bootloader