GL.iNet GL-MT300A flashing trunk DD

The right image to flash is here: https://downloads.openwrt.org/snapshots/trunk/ramips/mt7620/openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin
the md5sum was
$ cat md5sums | grep gl-mt
6897028a70dcdc97d10fcc1b2d82f0a8 *openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin

Replacing original firmware:
login as: root
root@192.168.8.1's password:
BusyBox v1.23.2 (2016-04-14 17:11:33 HKT) built-in shell (ash)

    ______  _____          ____    ____  _________  ______     ____      ____
 .' ___  ||_   _|        |_   \  /   _||  _   _  |/ ____ `. .'    '.  .'    '.
/ .'   \_|  | |     ______ |   \/   |  |_/ | | \_|`'  __) ||  .--.  ||  .--.  |
| |   ____  | |   _|______|| |\  /| |      | |    _  |__ '.| |    | || |    | |
\ `.___]  |_| |__/ |      _| |_\/_| |_    _| |_  | \____) ||  `--'  ||  `--'  |
 `._____.'|________|     |_____||_____|  |_____|  \______.' '.____.'  '.____.'
                   O P E N W R T     W I R E L E S S    F R E E D O M                                                                                                   
root@GL-MT300A:~#

 root@GL-MT300A:/tmp# wget http://downloads.openwrt.org/snapshots/trunk/ramips/mt7620/openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin
Connecting to downloads.openwrt.org (78.24.191.177:80)
openwrt-ramips-mt762 100% |***********************************************************************************************************************|  3584k

 root@GL-MT300A:/tmp# md5sum openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin
6897028a70dcdc97d10fcc1b2d82f0a8  openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin

 root@GL-MT300A:/tmp# mtd -r write openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin firmware
Unlocking firmware ...

 Writing from openwrt-ramips-mt7620-gl-mt300a-squashfs-sysupgrade.bin to firmware ...
Rebooting ...

After a while, we log in:
login as: root
BusyBox v1.24.2 () built-in shell (ash)

   _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 DESIGNATED DRIVER (Bleeding Edge, 49906)
 -----------------------------------------------------
  * 2 oz. Orange Juice         Combine all juices in a
  * 2 oz. Pineapple Juice      tall glass filled with
  * 2 oz. Grapefruit Juice     ice, stir well.
  * 2 oz. Cranberry Juice
 -----------------------------------------------------

It is really new, clean system:
root@OpenWrt:/overlay/upper# find
.
./etc
./etc/uci-defaults
./etc/uci-defaults/11_migrate-sysctl
./etc/uci-defaults/odhcpd.defaults
./etc/uci-defaults/10_migrate-shadow
./etc/uci-defaults/09_fix-seama-header
./etc/uci-defaults/20_migrate-feeds
./etc/uci-defaults/13_fix_group_user
./etc/uci-defaults/12_network-generate-ula
./etc/dropbear
./etc/dropbear/dropbear_rsa_host_key
./etc/board.json
./etc/config
./etc/config/dhcp
./etc/config/firewall
./etc/config/dropbear
./etc/config/network
./etc/config/system
./etc/config/wireless
./etc/ethers
./etc/dnsmasq.time

Lets change the password and we're done:
root@OpenWrt:~# passwd
Changing password for root
New password:
Retype password:
Password for root changed by root

Lets check what is installed:
root@OpenWrt:/overlay/upper/etc# opkg list_installed
base-files - 169-49906
busybox - 1.24.2-1
dnsmasq - 2.76-1
dropbear - 2016.74-1
firewall - 2016-01-29
fstools - 2016-07-24-addd7dc21fe99f2701c1d4708071578052af401d
hostapd-common - 2016-06-15-1
ip6tables - 1.4.21-2
iptables - 1.4.21-2
iw - 4.3-1
iwinfo - 2016-01-25-e4aca3910dff532ed878d0ceaf1ab6e8ad7719bf
jshn - 2016-07-29-290c64ef5b5c3e75be851594f269d6a9568e64e5
jsonfilter - 2016-07-02-dea067ad67d977c247c300c06676a06adf21e0c7
kernel - 4.4.14-1-1e4236606bdc5ee2f197c8022bea3431
kmod-cfg80211 - 4.4.14+2016-05-12-1
kmod-eeprom-93cx6 - 4.4.14-1
kmod-gpio-button-hotplug - 4.4.14-2
kmod-ip6tables - 4.4.14-1
kmod-ipt-conntrack - 4.4.14-1
kmod-ipt-core - 4.4.14-1
kmod-ipt-nat - 4.4.14-1
kmod-leds-gpio - 4.4.14-1
kmod-ledtrig-usbdev - 4.4.14-1
kmod-lib-crc-ccitt - 4.4.14-1
kmod-lib-crc-itu-t - 4.4.14-1
kmod-mac80211 - 4.4.14+2016-05-12-1
kmod-mt76 - 4.4.14+2016-06-17-1
kmod-nf-conntrack - 4.4.14-1
kmod-nf-conntrack6 - 4.4.14-1
kmod-nf-ipt - 4.4.14-1
kmod-nf-ipt6 - 4.4.14-1
kmod-nf-nat - 4.4.14-1
kmod-nls-base - 4.4.14-1
kmod-ppp - 4.4.14-1
kmod-pppoe - 4.4.14-1
kmod-pppox - 4.4.14-1
kmod-rt2800-lib - 4.4.14+2016-05-12-1
kmod-rt2800-mmio - 4.4.14+2016-05-12-1
kmod-rt2800-pci - 4.4.14+2016-05-12-1
kmod-rt2800-soc - 4.4.14+2016-05-12-1
kmod-rt2x00-lib - 4.4.14+2016-05-12-1
kmod-rt2x00-mmio - 4.4.14+2016-05-12-1
kmod-rt2x00-pci - 4.4.14+2016-05-12-1
kmod-slhc - 4.4.14-1
kmod-usb-core - 4.4.14-1
kmod-usb-ohci - 4.4.14-1
kmod-usb2 - 4.4.14-1
libblobmsg-json - 2016-07-29-290c64ef5b5c3e75be851594f269d6a9568e64e5
libc - 1.1.14-1
libexpat - 2.1.0-3
libgcc - 5.3.0-1
libip4tc - 1.4.21-2
libip6tc - 1.4.21-2
libiwinfo - 2016-01-25-e4aca3910dff532ed878d0ceaf1ab6e8ad7719bf
libjson-c - 0.12-1
libjson-script - 2016-07-29-290c64ef5b5c3e75be851594f269d6a9568e64e5
libnl-tiny - 0.1-5
libubox - 2016-07-29-290c64ef5b5c3e75be851594f269d6a9568e64e5
libubus - 2016-07-02-053be7df871e05478284235732f8b0608089512f
libuci - 2016-07-04.1-1
libuclient - 2016-01-28-2e0918c7e0612449024caaaa8d44fb2d7a33f5f3
libxtables - 1.4.21-2
logd - 2016-07-19-aead2c0cbffdda9b46d74a998a4c6aeef423b21a
mtd - 21
netifd - 2016-06-06-99e6dc68bbac5a57a0ebca810a9dc36e38667821
odhcp6c - 2016-06-30-7533a6243dc3ac5a747cf6ccbc4d0539dafd3e07
odhcpd - 2015-11-19-01d3f9d64486ac1daa144848944e877e7f0cb762
opkg - 9c97d5ecd795709c8584e972bfdf3aee3a5b846d-12
ppp - 2.4.7-9
ppp-mod-pppoe - 2.4.7-9
procd - 2016-07-29-2c9f5d4af1559b840c42f1443ede9f9fe809c58b
rt2800-pci-firmware - 2016-01-25-52442afee9907bc32a058f22bb3295d040677c26-1
swconfig - 11
ubox - 2016-07-19-aead2c0cbffdda9b46d74a998a4c6aeef423b21a
ubus - 2016-07-02-053be7df871e05478284235732f8b0608089512f
ubusd - 2016-07-02-053be7df871e05478284235732f8b0608089512f
uci - 2016-07-04.1-1
uclient-fetch - 2016-01-28-2e0918c7e0612449024caaaa8d44fb2d7a33f5f3
usign - 2016-07-04-ef6419142a3b0fbcddcccf536e3c1880302c6f89
wpad-mini - 2016-06-15-1

Comments

Post a Comment

Popular posts from this blog

Hardening OpenWRT - adding non-root user account

I have at home an OpenWRT on TP-Link 1043ND. As I'm most of the time out of my home, I use this for two functions:  - as reliable WiFi Access Point  - as last resort remote access device  - as a box used to wake up other Ethernet enabled devices @ home. As this box is exposed to Internet via IPv6 address, I decided to harden it a little. 1. Adding extra non privileged user account: root@OpenWrt:~# opkg update root@OpenWrt:~# opkg install shadow-useradd root@OpenWrt:~# mkdir /home root@OpenWrt:~# useradd -D GROUP=100 HOME=/home INACTIVE=-1 EXPIRE= SHELL= SKEL=/etc/skel CREATE_MAIL_SPOOL=no root@OpenWrt:~# useradd -m -s /bin/ash bart root@OpenWrt:~# cat /etc/passwd root:x:0:0:root:/root:/bin/ash daemon:*:1:1:daemon:/var:/bin/false ftp:*:55:55:ftp:/home/ftp:/bin/false network:*:101:101:network:/var:/bin/false nobody:*:65534:65534:nobody:/var:/bin/false bart:x:1000:1000::/home/bart:/bin/ash root@OpenWrt:~# passwd bart Changing password for bart New passw
Read more

Dropbear SSH keys and autossh on OpenWRT

Image
I have a box on Amazon EC2. And I want to have my OpenWRT that is behind IPv4 CGN and have public IPv6 to be reachable from IPv4 Internet. The best idea is to use ssh reverse tunnel connected with autossh to keep connection going. The very first think is to test if I can connect to my Amazon instance from my OpenWRT: root@OpenWrt:~# ssh 54.111.111.111 Host '54.111.111.111' is not in the trusted hosts file. (ssh-rsa fingerprint md5 0f:51:11:11:11:11:11:11:11:11:11:11:11:11:11:11) Do you want to continue connecting? (y/n) y root@54.111.111.111's password: At this point the public key of remote host will be added to .ssh/known_hosts. It is important as we can't have autossh to interact with console in future. root@OpenWrt:~# cat .ssh/known_hosts 2001:1111:1111:1111::1111:1111 ssh-rsa AAAAB3N....... 54.111.111.111 ssh-rsa AAAAB3N.......... Now we need to generate public/private key pair we will be using to connect to our Amazon instance. Invoke fol
Read more

SSH Tunel with OpenWRT

You need to install OpenSSH client: root@OpenWrt:~# opkg update root@OpenWrt:~# opkg install openssh-client Now OpenSSH client replaced DropBear client: root@OpenWrt:~# ls -l /usr/bin/ssh -rwxr-xr-x    1 root     root        590667 May 24 14:54 /usr/bin/ssh root@OpenWrt:~# ls -l /rom/usr/bin/ssh lrwxrwxrwx    1 root     root            16 Aug 19  2016 /rom/usr/bin/ssh -> ../sbin/dropbear root@OpenWrt:~# ls -l /overlay/upper/usr/bin/ssh -rwxr-xr-x    1 root     root        590667 May 24 14:54 /overlay/upper/usr/bin/ssh Can you spot a difference: root@OpenWrt:~# ssh usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]            [-D [bind_address:]port] [-E log_file] [-e escape_char]            [-F configfile] [-I pkcs11] [-i identity_file]            [-J [user@]host[:port]] [-L address] [-l login_name] [-m mac_spec]            [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address]            [-S ctl_path] [-W ho
Read more