Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Confirm success installing Mi Router 4A 100M (R4AC) #92

Closed
ramone01 opened this issue Aug 23, 2021 · 15 comments
Closed

Confirm success installing Mi Router 4A 100M (R4AC) #92

ramone01 opened this issue Aug 23, 2021 · 15 comments

Comments

@ramone01
Copy link

Hello, i tried many times with fail, but i finally made it.
1-) You need that firmware 2.18.28 (https://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_all_c4b35_2.18.28.bin)
2-) If device is bricked, use that zip to debricking while downgrade firmware. mir4ac.zip (http://www.mediafire.com/file/45dc6jhpezw290e/mir4ac.zip/file?) its tftp methode to debrick router.
3-) Than you update version to 2.18.58, you just push bin file with web interface. (http://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_firmware_e9eec_2.18.58.bin)

4-)After 2.18.58 with Chinese language rom, than boot debian 10 with vmware (includes gnome desktop). And start scripting. Just same as youtube video guide. (https://www.youtube.com/watch?v=VxzEvdDWU_s&t=143s)

Important note, The address you connect to via telnet, while script finishes, and the address you log in MUST BE the same.

i figured out with that methode.

down to miwifi_r4ac_all_c4b35_2.18.28.bin
update to miwifi_r4ac_firmware_e9eec_2.18.58.bin
debian 10 with gnome for run script and login web interface same vmware host.

i tried all versions of invasion, no problem all is OK.
@acecilia
Copy link
Owner

Thanks! Added to the readme

@vietchovui
Copy link

Failed to install on MiWiFi r4ac firmware version 2.18.58 with this openwrt firmware https://raw.githubusercontent.com/acecilia/OpenWRTInvasion/master/firmwares/OpenWrt/06-06-2020/openwrt-ramips-mt7621-xiaomi_mir3g-v2-squashfs-sysupgrade.bin
And now I'm unable to debrick it using MIWIFI tool or the Debrick tool provided by Hoddys.

@localhoct
Copy link

thanks for your guide ,its working i debrik my router :))

but the language of router is chinese how can i change it to english (no google translate)

@Gisi0
Copy link

Gisi0 commented Dec 5, 2021

works great
router starts to blink after flashing, have to reboot and than it works

@marufmks
Copy link

marufmks commented Apr 6, 2022

Hello, i tried many times with fail, but i finally made it. 1-) You need that firmware 2.18.28 (https://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_all_c4b35_2.18.28.bin) 2-) If device is bricked, use that zip to debricking while downgrade firmware. mir4ac.zip (http://www.mediafire.com/file/45dc6jhpezw290e/mir4ac.zip/file?) its tftp methode to debrick router. 3-) Than you update version to 2.18.58, you just push bin file with web interface. (http://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_firmware_e9eec_2.18.58.bin)

4-)After 2.18.58 with Chinese language rom, than boot debian 10 with vmware (includes gnome desktop). And start scripting. Just same as youtube video guide. (https://www.youtube.com/watch?v=VxzEvdDWU_s&t=143s)

Important note, The address you connect to via telnet, while script finishes, and the address you log in MUST BE the same.

i figured out with that methode.

down to miwifi_r4ac_all_c4b35_2.18.28.bin update to miwifi_r4ac_firmware_e9eec_2.18.58.bin debian 10 with gnome for run script and login web interface same vmware host.

i tried all versions of invasion, no problem all is OK.

i've followed Hoodys method and i got stuck here. "Download the openwrt-sysupgrade-image to /tmp and write it to the flash with mtd -r write OS1 ". i have a downloaded openwrt firmware .how can i put it into /tmp and write the firmware? please help.

@z4kio
Copy link

z4kio commented May 20, 2022

Worked for me.
Thanks a lot!!!

@ahmeedslom
Copy link

Hello, i tried many times with fail, but i finally made it. 1-) You need that firmware 2.18.28 (https://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_all_c4b35_2.18.28.bin) 2-) If device is bricked, use that zip to debricking while downgrade firmware. mir4ac.zip (http://www.mediafire.com/file/45dc6jhpezw290e/mir4ac.zip/file?) its tftp methode to debrick router. 3-) Than you update version to 2.18.58, you just push bin file with web interface. (http://bigota.miwifi.com/xiaoqiang/rom/r4ac/miwifi_r4ac_firmware_e9eec_2.18.58.bin)

4-)After 2.18.58 with Chinese language rom, than boot debian 10 with vmware (includes gnome desktop). And start scripting. Just same as youtube video guide. (https://www.youtube.com/watch?v=VxzEvdDWU_s&t=143s)

Important note, The address you connect to via telnet, while script finishes, and the address you log in MUST BE the same.

i figured out with that methode.

down to miwifi_r4ac_all_c4b35_2.18.28.bin update to miwifi_r4ac_firmware_e9eec_2.18.58.bin debian 10 with gnome for run script and login web interface same vmware host.

i tried all versions of invasion, no problem all is OK.

can u share the openwrt_fmware.bin for R4AC or download link

@ramone01
Copy link
Author

ramone01 commented Jul 28, 2022 via email

@devnoname120
Copy link

devnoname120 commented Aug 15, 2022 •
edited
Loading

@ramone01 Friendly reminder :)

Edit: FW download available here.

@ghost
Copy link

ghost commented Nov 5, 2022

Thanks. Finally got this 2.18.58 on my router. but it's still not working with docker method. I am still getting this error:
Warning: the process has finished, but seems like ssh connection to the router is not working as expected.

  • Maybe your firmware version is not supported, please have a look at ........

should i must load debian on vmware and do it with that method?

@ghost
Copy link

ghost commented Nov 5, 2022

Alright, so let me add this here. on this version: 2.18.58, it wasn't working (openwrtinvasion couldn't connect to the router) but i downgraded the version to 2.18.51 and boom it worked now. you can get all Chinese versions from here:
https://mirom.ezbox.idv.tw/en/miwifi/R4AC/roms-stable/

@parbitwoas
Copy link

parbitwoas commented Mar 9, 2024 •
edited
Loading

hello i have Xiaomi Mi Router 4A (R4AC) and i cant use ssh or telnet to continue the process
can any one help me to fix it ?

PS C:\WINDOWS\system32> docker build -t openwrtinvasion https://github.com/acecilia/OpenWRTInvasion.git
[+] Building 3.8s (8/8) FINISHED docker:default
=> CACHED [internal] load git source https://github.com/acecilia/OpenWRTInvasion.git 1.9s
=> [internal] load metadata for docker.io/library/python:3-alpine 1.7s
=> [1/5] FROM docker.io/library/python:3-alpine@sha256:1a0501213b470de000d8432b3caab9d8de5489e94 0.0s
=> CACHED [2/5] WORKDIR /app 0.0s
=> CACHED [3/5] COPY requirements.txt ./ 0.0s
=> CACHED [4/5] RUN pip install -r requirements.txt 0.0s
=> CACHED [5/5] COPY . ./ 0.0s
=> exporting to image 0.0s
=> => exporting layers 0.0s
=> => writing image sha256:05916f17e71f0f1a96b5a2c497951fe1333b554da1c2c90827db44ad170c06f8 0.0s
=> => naming to docker.io/library/openwrtinvasion 0.0s

View build details: docker-desktop://dashboard/build/default/default/3ti2n9impklsbdam38zpgquza

What's Next?
View a summary of image vulnerabilities and recommendations → docker scout quickview
PS C:\WINDOWS\system32> docker run --network host -it openwrtinvasion
Router IP address [press enter for using the default 'miwifi.com']: 192.168.31.1
Enter router admin password: pars@5546@
There two options to provide the files needed for invasion:

  1. Use a local TCP file server runing on random port to provide files in local directory script_tools.
  2. Download needed files from remote github repository. (choose this option only if github is accessable inside router device.)
    Which option do you prefer? (default: 1)

router_ip_address: 192.168.31.1
stok: 79d3f70d3f345727da02c655278dfd76
file provider: local file server

start uploading config file...
start exec command...
local file server is runing on 0.0.0.0:47807. root='script_tools'
done! Now you can connect to the router using several options: (user: root, password: root)

  • telnet 192.168.31.1
  • ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa -c 3des-cbc -o UserKnownHostsFile=/dev/null [email protected]
  • ftp: using a program like cyberduck

PS C:\WINDOWS\system32> ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -oHostKeyAlgorithms=+ssh-rsa -c 3des-cbc -o UserKnownHostsFile=/dev/null [email protected]
kex_exchange_identification: Connection closed by remote host
Connection closed by 192.168.31.1 port 22

@Eretick
Copy link

Eretick commented Mar 31, 2024

it worked now

I tried .51 from your link but it didn't work for me. I tried both ocker vesion and linux (dual boot), still the same.

@prash723
Copy link

prash723 commented Jul 2, 2024

I am trying with version 2.18.51 in Fedora with Virtual box no working can anyone help?

I am getting error Maybe your firmware version is not supported, please have a look at .....

@legedug
Copy link

legedug commented Sep 13, 2024

Confirm success installin openwrt from debricking, using version 2.18.58 to version 23.05.4 in Kali Linux. Use version r4a (not international version).
In kali linux open firewall port 22 and 21 than exploitation occur.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests