重磅, 小米多模网关全系列固件破解telnet, 免拆机

uavana

引用 15楼 jonceli的经验

分了四个步骤， 1、hacs安装xiaomi gateway3 重启ha； 2、集成中配置xiaomi gateway3设置自己的小米用户名和密码； 3、集成中配置xiaomi gateway3添加小米多摸网关，此时应该在步骤2中找到了该网关以及它的token数据； 4、在配置选项的“open telnet command"栏中输入“{"method":"set_ip_info","params":{"ssid":"\"\"","pswd":"123123 ; passwd -d admin ; echo enable > /sys/class/tty/tty/enable; telnetd"}}”然后提交，稍候片刻即可

为前几个月拆机焊接破解的哥们默哀5秒钟

原文链接: https://gist.github.com/zvldz/1bd6b21539f84339c218f9427e022709

# Soft hack to open telnet
You need gateway 3(mgl03) connected to MiHome. And also ip and gateway token.

### 1 way (recommended)
Via [XiaomiGateway3](https://github.com/AlexxIT/XiaomiGateway3) component.

You must input in the 'Open Telnet command' field:
```
{"method":"set_ip_info","params":{"ssid":"""","pswd":"123123 ; passwd -d admin ; echo enable > /sys/class/tty/tty/enable; telnetd"}}
```

### 2 way (recommended if not using Home Assistant)
php-miio (https://github.com/skysilver-lab/php-miio)

You may need to change id.
```sh
php miio-cli.php --ip GW_IP --token GW_TOKEN --sendcmd '{"id":123,"method":"set_ip_info","params":{"ssid":"""","pswd":"123123 ; passwd -d admin ; echo enable > /sys/class/tty/tty/enable; telnetd"}}'
```

### 3 way (maybe problem with sequence id)
python-miio (https://github.com/rytilahti/python-miio)
```sh
miiocli device --ip GW_IP --token GW_TOKEN raw_command set_ip_info '{"ssid":"""","pswd":"123123 ; passwd -d admin ; echo enable > /sys/class/tty/tty/enable; telnetd"}'
```

After opening telnet, it is better to install custom firmware.

Read here:
https://gist.github.com/zvldz/b40b4873e3c4c1a64ac536e8ce5dbdad#the-easy-way

This method should also work with:
* lumi.gateway.mgl03 - Mi Smart Home Hub
* lumi.gateway.acn01 - Aqara Hub M1S CN
* lumi.gateway.aeu01 - Aqara Hub M1S EU
* lumi.aircondition.acn05 - Aqara Air Conditioning Controller P3
* lumi.gateway.sacn01 - Smart USB Wall Outlet Hub



I am not author, I just tested and improved and published.

复制代码

龙魂炎虎

意味着什么呢

uavana

龙魂炎虎 发表于 2021-2-24 16:09
意味着什么呢

意味着不用再拆机器焊接了, 前几个月拆机破解的哥们要哭了

eric

拆机还好吧！！感谢分享！！

Alkali

虽然我拆机没怎么损坏外观， 但我还是吐了

感谢分享！

zxyny1989

uavana 发表于 2021-2-24 16:10
意味着不用再拆机器焊接了, 前几个月拆机破解的哥们要哭了

厉害了大神。
貌似有人拆机搞废了的。

wangsibo520

怎么操作啊

sunfang1cn

汗，上个月拆了两台了，好在都没变砖

zhuxuwei8

原文链接无法打开，是不是要梯子啊

wyh260595711

我哭了，周日刚刚撬壳的时候，瑞士军刀在手上划了一道又长又深的口子，血都止不住。。。