TP-Link RE450 v2 - Need help with reverting back to stock firmware

Installing and Using OpenWrt
1

Hi folks,

I have been testing OpenWrt on my TP-Link RE450 v2 and I would like to flash back to the stock firmware. I have used this guide and extracted the contents of the stock firmware but I don't know which of the files in the output to flash back to the router. This is what i got when I ran the -e switch to extract the contents of the bin file:

image

This is my scan output:

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
23476         0x5BB4          U-Boot version string, "U-Boot 1.1.4 (Dec 20 2017 - 20:17:05)"
23524         0x5BE4          CRC32 polynomial table, big endian
24824         0x60F8          uImage header, header size: 64 bytes, header CRC: 0xF8FB28B0, created: 2017-12-20 12:17:06, image size: 36357 bytes, Data Address: 0x80010000, Entry Point: 0x80010000, data CRC: 0x94E7906, OS: Linux, CPU: MIPS, image type: Firmware Image, compression type: lzma, image name: "u-boot image"
24888         0x6138          LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 96256 bytes
61246         0xEF3E          TP-Link firmware header, firmware version: 0.0.0, image version: "", product ID: 0x0, product version: 0, kernel load address: 0x0, kernel entry point: 0x80002000, kernel offset: 0, kernel length: 512, rootfs offset: 770002, rootfs length: 0, bootloader offset: 0, bootloader length: 0
61758         0xF13E          LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 2207224 bytes
831761        0xCB111         Squashfs filesystem, little endian, version 4.0, compression:lzma, size: 4312771 bytes, 695 inodes, blocksize: 1048576 bytes, created: 2017-12-20 12:26:50

I am basically trying to figure this out and doing alot of reading but if I am doing it wrong, please show me the right way to do this as I really do not want to brick my repeater. AFAIK once I have the stripped firmware I will be able to flash it back to the router using the LEDI web gui. I also read that there is a way to do it through SSH but I don't have the steps for this.

Any help is always appreciated.

Thanks!
Ken

2

Ok, folks. I think I am starting to understand this. So I looked at the offset where the TP-Link firmware header begins (0xEF3E). Loaded the bin file into a hex editor and searched to that offset. Then deleted everything before that offset and saved the file. This is what I got (as I expected) when I scanned it in Binwalk:

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             TP-Link firmware header, firmware version: 0.0.0, image version: "", product ID: 0x0, product version: 0, kernel load address: 0x0, kernel entry point: 0x80002000, kernel offset: 0, kernel length: 512, rootfs offset: 770002, rootfs length: 0, bootloader offset: 0, bootloader length: 0
512           0x200           LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 2207224 bytes
770515        0xBC1D3         Squashfs filesystem, little endian, version 4.0, compression:lzma, size: 4312771 bytes, 695 inodes, blocksize: 1048576 bytes, created: 2017-12-20 12:26:50

Can someone please tell me if I am on the right track here and if so, what is the best (safest) way to flash this back to my router? I would love to just cross my fingers and flashing it back but I can't afford to take the chance :slight_smile:

Thanks,
Ken

3

Really, nobody???

It's not like I want the answer handed to me. I DID put in the work. Just need some help from the folks that are more experienced at this than me.

4

See this topic

5

Hi, did you manage to get back to stock?
can you share the firmware?