求大神破解登录账号密码！

1053541731

如图常用账号密码试过了，网上搜不到。现在编程器备份原厂固件，希望大神能破解！
" J. T4 D5 v3 o2 F
) [, C+ t* J+ G, [2 W现重新编辑，上传至百度云，链接: https://pan.baidu.com/s/1eSMvrou 密码: wu8v
7 L5 X  Z/ ?3 k2 `( \配置为mt7620N  8M+64M，双wan口，三lan口

2 d+ D9 x' Q% ]/ k7 ^8 a) B

nnsat

帮破还收钱啊

3ax31a

什么配置的，文件应该放到百度盘啊，

1053541731

第一发帖不知道怎么取消金币！不好意思。

nnsat

下载文件看不出所以然，建议还是上TTL来查还好些，好像波特率是57600。
固件应该是维盟做的，不妨试一下维盟的账号

1053541731

nnsat 发表于 2018-1-7 23:17
下载文件看不出所以然，建议还是上TTL来查还好些，好像波特率是57600。
固件应该是维盟做的，不妨试一下维 ...

帮忙看下ttl信息，焊了ttl针，只是刷了breed启动文件。下面是ttl信息。


$ Z9 v3 F' g& m
Boot and Recovery Environment for Embedded Devices
Copyright (C) 2017 HackPascal <hackpascal@gmail.com>
Build date 2017-12-26 [git-812ef5f]
Version 1.1 (r1163)

DRAM: 64MB
Platform: MediaTek MT7620N ver 2, eco 6
Board: Reference design
$ ~; [8 |- B; f4 ]. SClocks: CPU: 580MHz, Bus: 193MHz
/ X" u0 H! o) v, w' vFlash: Winbond W25Q128 (16MB) on rt2880-spi
rt2880-eth: Using MAC address 00:0c:43:76:20:77
eth0: MediaTek MT7620N built-in 5-port 10/100M switch
; d  K' w  v5 M" y; o
4 k- r2 G' A# b: sNetwork started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0

5 q: ^# \. |3 e0 m9 ?. M) `Press any key to interrupt autoboot ... 0   
, I, R4 p3 R3 k  o- _/ v
Trying to boot firmware from 0x00050000 in flash bank 0 ...
# m% L2 v0 p* O: r# n- ?8 l1 v6 M+ ZReading data into memory ...
U-Boot firmware image header detected.
    Image Name:   Linux Kernel Image
5 h6 r* D* H& `9 @1 o    Data Size:    5897183 Bytes
: Q. }  ?5 I, D    Load Address: 80000000
6 T) B& R9 \3 K) b8 J) `5 D  `" O    Entry Point:  8000c2f0
* m9 W) m" Z( g* O* ]Uncompressing data (LZMA) ... done.
1 H# l  @. [. b4 GFlushing cache ... done.
# K4 i7 ~" s3 O* u7 w7 ?) R8 t
5 g0 T* j, q- u! c  ?Starting kernel at 0x8000c2f0...

: p9 m7 }, j4 u
LINUX started...
; \% k4 A# h1 n2 x% c$ `5 L
& n, k# X1 S; Y7 ` THIS IS ASIC
; L( D2 ]9 C9 W  [$ ert_board_ram_size: 0x4000000
) w  C& }% p- qLinux version 2.6.36+ (root@jhl-ubuntu) (gcc version 3.4.2) #5139 Fri Oct 30 20:05:21 EDT 2015
) G0 _; h, V3 V# Y& J( t& w! D
# U" w# D2 n; y The CPU feqenuce set to 580 MHz

MIPS CPU sleep mode enabled.
2 P8 ~+ s5 B( C4 o9 ?' j1 N+ M PCIE: bypass PCIe DLL.
PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
/ X3 W' @# |; S/ ? disable all power about PCIe
) u- k) Y1 T/ S* R PCIE: PLL power down for MT7620N
& y! s; n+ A/ l8 T" W6 h% bCPU revision is: 00019650 (MIPS 24Kc)
Determined physical RAM map:
3 h/ c" ^% F3 h. i8 T memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
/ p. H7 P# C) N! }Movable zone start PFN for each node
/ j* r% I3 z" cearly_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
9 N7 V4 L9 y, i, t+ x  r& vBuilt 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
7 g% Y4 u! G- a& k& M3 p' MKernel command line: console=ttyS1,57600n8 root=/dev/ram0 panic=1 console=ttyS0
PID hash table entries: 256 (order: -2, 1024 bytes)
6 d7 ?! H' ~& G; A/ kDentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
+ T- ~5 M0 ^! L( B& t- F* HPrimary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Writing ErrCtl register=0000000a
Readback ErrCtl register=0000000a
Memory: 54436k/65536k available (3059k kernel code, 11100k reserved, 659k data, 4672k init, 0k highmem)
, N4 |. F2 C$ U0 b. s2 INR_IRQS:128
, b% W" Q. |: e/ K, X) R2 [MTK/Ralink System Tick Counter init... cd:8038fd48, m:214748, s:32
: J$ Z+ g/ a2 T& U; {9 G" o1 Fconsole [ttyS1] enabled
Calibrating delay loop... 392.19 BogoMIPS (lpj=196096)
! J8 n1 U5 o; P) K# V7 d" xpid_max: default: 32768 minimum: 301
' V: x  C" W0 r7 Y0 }+ [$ a& HMount-cache hash table entries: 512
- d. D  |# G4 a/ c0 Y' p; e% q) nNET: Registered protocol family 16
6 R) n" B! U4 e. x8 E, t4 Z  g7 v5 rbio: create slab <bio-0> at 0
SCSI subsystem initialized
Switching to clocksource Ralink external timer
: Q) S* a& B! P+ z( s% VNET: Registered protocol family 2
: c" C" x/ d4 g6 r. ?9 [IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
1 Z, \- U2 C1 T6 o  ~% jTCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
+ q  d) R% Y+ }. p8 c4 D: ]TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
4 W4 i$ U/ b. bUDP hash table entries: 256 (order: 0, 4096 bytes)
+ X( Y* V  p2 y: U: ?) A5 D* z8 j# |UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
Load Kernel WDG Timer Module
1 P$ b# u1 m# T( `) Q& Z# O, Y  yfuse init (API version 7.15)
, D: Y3 D7 k% z( h' ]3 J! u! Wmsgmni has been set to 106
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
' q4 F# I: m4 P1 F/ D# Bcreate proc entry led success!
Ralink gpio driver initialized
1 Y$ Q7 L) Z: N/ L" L% N" l# w! G' N4 DSerial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
" ~9 L( P, Q3 I& z* J( G) P- }brd: module loaded
$ R6 y5 m. n3 x$ Sdeice id : ef 40 18 0 0 (40180000)
$ Z. U" J" M; x9 R4 c. {+ ]  \+ hW25Q128BV(ef 40180000) (16384 Kbytes)
0 x' e/ s8 Q' h! vmtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 65536
% J' G* r5 b6 |9 qCreating 7 MTD partitions on "raspi":
) z1 w. D" P. ^' g+ O1 P% [! L0x000000000000-0x000001000000 : "ALL"
1 P' S8 L2 o* F' F/ G! p3 a+ C7 `0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0 C3 S# p+ D1 Q- U3 U0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x0000007b0000 : "Kernel"
6 W' _& u- a1 z. A! v2 S0x0000007b0000-0x0000007f0000 : "modules"
0x0000007f0000-0x000000800000 : "buginfo"
% K+ h. P* ]  Q5 }% N2 ], L1 erdm_major = 253
. C$ c' x0 v6 \2 e# pSMACCR1 -- : 0x0000000c
6 o' b4 A/ M) O  @# QSMACCR0 -- : 0x43762077
Ralink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
% K; d. _1 s5 b9 p" }- A/ d* sNAPI enable, Tx Ring = 1024, Rx Ring = 256
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43762077
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
: b" |1 P1 s2 n4 g; r- pNET: Registered protocol family 24
PPTP driver version 0.8.5
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
jhl_order: (C) 2007 jianhl
2 k, G' Y* K7 Ujhl_share_init  start
jhl_share_init ok
3 [+ ], K6 |7 {( o- ~9 m& A; Pjhl_ipdo_init: (C) 2009 jianhl
0 i7 D' A+ l$ ^% H( F5 Rksys_log : create a netlink socket ok!
1 a! L6 K: X2 K, t1 n. G! O4 Ojianhl_arp_init  start
jhl hostinfo init
/ I, c* U$ j7 w! Kjhl_conn_init start
/ j' q+ @4 I2 ~$ w( fjhl_conn_init end
2 ^' u6 |9 O4 t+ wjhl_dns_cache_init ok
jhl_dnsc_rule_init start
jhl_pppoe_init start
" O- f* |$ w9 i# K" ?jhl_pppoe_init ok
% g; G  ^6 j% I2 |2 bjhl_user_init ok
jhl_session_init start
1 W- A) V% Y9 `2 |5 f1 Sjhl_session_init ok
jhl_nvram_init: (C) 2007 jianhl
jhl_msg_init start
9 v9 v7 ?: @1 q6 a! U4 @8 Emroute_init: (C) 2009 jianhl
jingx_init: (C) 2007 jianhl
jhl_ddos_init ok
jhlradius : create a netlink socket ok!
1 N+ O- D, H7 |  M$ h) E! b! s2 Pshibie_url_init ok
7 V1 L  ~2 t6 m' S( `jhl_url_init ok
5 {' R9 H; S: f+ l, `7 K& burlrd_init: (C) 2009 jianhl
fastping_init: (C) 2009 jianhl
http_init: (C) 2014 jianhl
2 {3 k. s: C! [; D4 Hsimple_cache_init: (C) 2013 jianhl
jianhl_anyip_init ok
jianhl_br_init  
jhl_third_auth_init ok
jhl_simple_gg_init start
Netfilter messages via NETLINK v0.30.
5 @7 Z' G* {4 i( @nf_conntrack version 0.5.0 (850 buckets, 3400 max)
ctnetlink v0.93: registering with nfnetlink.
) Q- R2 e. Z, w+ A% Y: xnf_conntrack_rtsp v0.6.21 loading
/ K% g% S# b  m. l: i& p- r8 p" Nmatchsize=264
xt_time: kernel timezone is -0000
5 c* T$ n' Q, [3 t! t+ F5 }GRE over IPv4 demultiplexor driver
gre: can't add protocol
nf_nat_rtsp v0.6.21 loading
( L/ q. r/ c4 Nip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
& H. s. p; t9 e- QNET: Registered protocol family 17
: h& ]( S- ^+ [+ g, z0 K; [NET: Registered protocol family 15
7 \, B; E+ Z$ G2 I802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Freeing unused kernel memory: 4672k freed
* r2 ~: F0 e, g, V# Z" [6 X5 Z
/ r% K  o1 B% P. P2 W
! J$ Y% i/ j# g/ ?: l5 NHit ENTER for console...
' O) n, y- i# O$ W6 Q
Algorithmics/MIPS FPU Emulator v1.5
9 N1 c# }1 S) d. V5 C0 f9 O9 O7 T
Performed 4762 set and 0 unset operations. 10 required no changes.
* p/ h2 X( |$ u. p! X8 J) sNot commiting.
/ c# G0 [4 b, J
5 Y) |) F6 A- m; |* Y9 dgoing to insmod wys_pg2.ko

md5 checking succeed!
; B, q2 l! S6 q) I& `3 Rwys_pg2: module license 'unspecified' taints kernel.
. a$ F2 z" ^1 n' d6 c8 V7 \7 ]0 tDisabling lock debugging due to kernel taint
ShiBie_LV0_Init xxxxxx start
3 G6 S/ b& P+ i  O+ pLV_http_Init start
LV_P2P_XunLei_Init start
: P- ~8 e; C% j- ]. k: w& r+ q$ JLV_WLYY_Init start
$ i) f/ k8 a$ OLV_Mobile_Init start
7 N( m( W. T" a/ b) e/ J" fLV_DianShi_Init start
2 {7 Q9 g1 q; v" B7 Y/ L, [9 zLV_gupiao_Init start
- D% S7 E2 p8 tLV_tongxin_app_Init start
LV_GameMaintenance_Init start
# n9 X- Q& H5 S' \) J2 zLV_YouXi_Init start
' x/ `7 z) |! t  Y* X0 XLV_YunPan_Init start
, o! ^: D4 a2 U3 \6 g$ WLV_Mobile_Game_Init start
wys_pg2 insert succeedly!
* s# M# `( t( G7 G- pswitch reg write offset=2004, value=ff0003
switch reg write offset=2104, value=ff0003
switch reg write offset=2204, value=ff0003
6 J3 X* b1 Z$ w8 }; Tswitch reg write offset=2304, value=ff0003
1 L* d; R( t1 ?: ~switch reg write offset=2404, value=ff0003
: T1 l; d$ F' B  Z( d) E5 kswitch reg write offset=2504, value=ff0003
0 N! Z6 x" v2 `( o" \  a- w" f$ @switch reg write offset=2010, value=810000c0
switch reg write offset=2110, value=810000c0
4 J" b) S( k3 S! A7 b* f' L- ~6 eswitch reg write offset=2210, value=810000c0
4 o5 Y/ F6 }. ]" B3 m0 O/ ?; K% Oswitch reg write offset=2310, value=810000c0
* k$ e* R3 R; cswitch reg write offset=2410, value=810000c0
/ @. D  E' u3 f( O$ Q6 _switch reg write offset=2510, value=810000c0
6 V8 `7 h4 g$ R) Rswitch reg write offset=2610, value=81000000
, p4 t8 ^6 \- U8 X. B5 a. ?switch reg write offset=2710, value=81000000
4 ]6 E" q+ H2 |" S3 I5 qswitch reg write offset=2604, value=20ff0003
/ Z6 j% n. @7 X7 O7 G' V. mswitch reg write offset=2704, value=20ff0003
9 g6 a! t5 s1 j. ]% u12345
switch reg write offset=2014, value=10001
0 ?/ h- c/ E5 u* N! [4 xswitch reg write offset=2114, value=10002
; ~' u  t# f, |7 @  R7 jswitch reg write offset=2214, value=10003
switch reg write offset=2314, value=10004
switch reg write offset=2414, value=10005
switch reg write offset=2514, value=10006
REG_ESW_WT_MAC_ATC is 0x7ff0002
% s6 }# l0 O' V: gdone.
Raeth v3.0 (NAPI
" _+ s; Z( Z* X3 w; m7 w7 V/ Q)
6 R+ F9 Z6 t* N9 s( @  w
phy_tx_ring = 0x00464000, tx_ring = 0xa0464000

8 C0 B' T$ p7 D3 A% aphy_rx_ring0 = 0x00463000, rx_ring0 = 0xa0463000
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43762077
ESW: Link Status Changed - Port0 Link UP
CDMA_CSG_CFG = 81000000
8 p  N3 e1 s! HGDMA1_FWD_CFG = 20710000
ra2880stop()...Done
* ]+ m! s* N( W5 H0 YFree TX/RX Ring Memory!
. d/ d* ]% ?# P9 \4 M3 oRaeth v3.0 (NAPI
)
. c; k% u7 `( Y+ `! ]  ]% k
* G* S; |0 X5 @$ fphy_tx_ring = 0x027ac000, tx_ring = 0xa27ac000

phy_rx_ring0 = 0x0046f000, rx_ring0 = 0xa046f000
SMACCR1 -- : 0x00008081
2 L; A8 Q/ ~/ S6 lSMACCR0 -- : 0x001d4981
( `3 J9 H6 |9 L/ D: i9 o1 XCDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
device eth2 entered promiscuous mode

$ ?8 O/ d4 u9 ]4 h" N4 }- Y# G& n2 E
=== pAd = c0731000, size = 785480 ===
& l/ U5 I, S2 x/ C- R& t7 e# j
; }$ T  W6 g# q* z+ R/ M& ~<-- RTMPAllocTxRxRingMemory, Status=0
( n9 `( I8 F4 T: A<-- RTMPAllocAdapterBlock, Status=0
; l7 H' K& t" m& f9 X
----name:ra0--pAd:c0731000--
0 r! I/ e% w5 b: J  Q% e$ d: ^RX DESC a27f2000  size = 4096
1. Phy Mode = 9
2. Phy Mode = 9
  h* _% c- R) r" j3 ~1 Vrtmp_ee_flash_init() ok
3. Phy Mode = 9
AntCfgInit: primary/secondary ant 0/1
Current Temperature from BBP_R49=0xffffffef
MCS Set = ff ff 00 00 00
Main bssid = 80:81:00:1d:49:88
1 _# D! ~" }2 D+ b% d- l<==== rt28xx_init, Status=0
0x1300 = 00064380
5 c( A8 r( q0 [- {. R- L! i7 L0 {device ra0 entered promiscuous mode
. B: g4 V6 b% ^device ra1 entered promiscuous mode
device ra2 entered promiscuous mode
7 A: h% w- R4 p0 H6 G+ Breset dual lan end
br1: port 1(ra0) entering forwarding state
% F; D. U/ \+ G. b: x. Ybr1: port 1(ra0) entering forwarding state
, i' h( b* D8 rbr2: port 1(ra1) entering forwarding state
* u8 J! t( N) w, z0 R* cbr2: port 1(ra1) entering forwarding state
* y/ G7 H. f2 g4 Q: Mbr3: port 1(ra2) entering forwarding state
7 e3 v  w( T4 p. nbr3: port 1(ra2) entering forwarding state
$ H6 L; A& p/ l9 `ESW: Link Status Changed - Port0 Link Down
ESW: Link Status Changed - Port0 Link UP
% n/ T& F6 _1 d6 Z7 w& b8 jled=38, on=4000, off=1, blinks,=1, reset=1, time=4000
led=9, on=4000, off=1, blinks,=1, reset=1, time=4000
system init ok
Factory test start init
set r[jhl_fact_test_opt:910]Factory Test Start Router,LAN:eth2.1,WAN:eth2.5
; F6 G" K, |9 T# l: U# q
ole!!
1 S. s& V1 n+ m" Y6 n0 _# L" u5 X7 S. Ook
Factory test init OK
$ r# h1 d+ v3 c* I! b2 H- o% ?2 i

1053541731

nnsat 发表于 2018-1-7 23:17
5 K4 x8 k4 d$ p; \1 _下载文件看不出所以然，建议还是上TTL来查还好些，好像波特率是57600。
固件应该是维盟做的，不妨试一下维 ...

帮忙看下ttl信息，焊了ttl针，只是刷了breed启动文件。下面是ttl信息。

1 `& F5 j7 R* C

9 Z$ [9 o( o6 F& c( A" LBoot and Recovery Environment for Embedded Devices
, o3 S! j& ?( S/ M. {9 ~3 lCopyright (C) 2017 HackPascal <hackpascal@gmail.com>
Build date 2017-12-26 [git-812ef5f]
$ l( m3 R% W' {- \/ rVersion 1.1 (r1163)
, C- c0 a) Y6 Q! J3 ~, s+ W
DRAM: 64MB
Platform: MediaTek MT7620N ver 2, eco 6
# v9 ?6 }. j, _, W+ O* v( W: }6 c$ YBoard: Reference design
( {8 W( |6 f5 o6 F  ^' {( h# O2 x& t* GClocks: CPU: 580MHz, Bus: 193MHz
" A1 r$ O8 U5 R0 QFlash: Winbond W25Q128 (16MB) on rt2880-spi
2 f: [1 O9 h4 C  `- vrt2880-eth: Using MAC address 00:0c:43:76:20:77
eth0: MediaTek MT7620N built-in 5-port 10/100M switch

: f% e0 P' ~1 |0 J  \( S2 uNetwork started on eth0, inet addr 192.168.1.1, netmask 255.255.255.0
1 ?( G! K# [2 A9 d8 |
7 @4 s1 ~( D( n# O. S7 HPress any key to interrupt autoboot ... 0   
: b/ O: P9 p$ n9 X4 n
Trying to boot firmware from 0x00050000 in flash bank 0 ...
" G& K% H2 @4 m  a9 AReading data into memory ...
U-Boot firmware image header detected.
8 g2 _, A- ?0 l7 M    Image Name:   Linux Kernel Image
* E: f& ^. K, h" w$ S0 m" `    Data Size:    5897183 Bytes
3 U- ~+ D6 v1 B/ b* s1 Z, i    Load Address: 80000000
8 y, M. E; F% u) |, O8 d    Entry Point:  8000c2f0
Uncompressing data (LZMA) ... done.
Flushing cache ... done.
  E0 ^0 Z% G- H* o+ F+ S4 j  Q! g3 }
5 ~- g9 e+ b5 U! Y+ H0 X, [Starting kernel at 0x8000c2f0...


) |6 `) z- i7 ^, k* o. RLINUX started...
  N& s; q, T$ C* y/ w$ m
THIS IS ASIC
rt_board_ram_size: 0x4000000
* P+ G! E7 n* j2 D8 g% ALinux version 2.6.36+ (root@jhl-ubuntu) (gcc version 3.4.2) #5139 Fri Oct 30 20:05:21 EDT 2015

The CPU feqenuce set to 580 MHz
8 m8 z) y2 W2 C4 w% O- Y  @5 t
MIPS CPU sleep mode enabled.
) Y6 Q2 ~+ e  M6 ~1 i PCIE: bypass PCIe DLL.
3 Q2 ?( [# c! C) c3 \3 r( V PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
disable all power about PCIe
PCIE: PLL power down for MT7620N
CPU revision is: 00019650 (MIPS 24Kc)
3 S/ L  u& U6 t* M1 |0 z0 yDetermined physical RAM map:
; ?2 S# w( S' [ memory: 04000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
4 l) T$ D) J8 G+ u  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
1 d' [% s0 J7 F$ u( w. W    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 panic=1 console=ttyS0
  N, m- Q2 ~1 J! X% K( T; a8 L% F; YPID hash table entries: 256 (order: -2, 1024 bytes)
# M! u, m* L; ~; P5 ^: }8 [5 R1 d9 rDentry cache hash table entries: 8192 (order: 3, 32768 bytes)
( L& j, @& d% Z3 D$ y9 wInode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
! y& X3 G5 E2 N2 ^  ~( x! E( mWriting ErrCtl register=0000000a
+ g* W0 B, s( m+ dReadback ErrCtl register=0000000a
Memory: 54436k/65536k available (3059k kernel code, 11100k reserved, 659k data, 4672k init, 0k highmem)
NR_IRQS:128
1 y6 z$ c! B5 h7 r$ HMTK/Ralink System Tick Counter init... cd:8038fd48, m:214748, s:32
: y& H3 H/ x: y8 Dconsole [ttyS1] enabled
Calibrating delay loop... 392.19 BogoMIPS (lpj=196096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
: e0 N6 }6 P" v; {. gbio: create slab <bio-0> at 0
8 h3 s9 Y: c& BSCSI subsystem initialized
Switching to clocksource Ralink external timer
NET: Registered protocol family 2
( M# b( f5 K; d% D) C, ?! tIP route cache hash table entries: 1024 (order: 0, 4096 bytes)
6 m5 U: [0 V& H/ Y6 [  i& n6 G- pTCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
: C- n4 O% x2 N$ g' |! f; o5 WTCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
2 U7 A+ ]) A1 l0 D) B1 DLoad Kernel WDG Timer Module
fuse init (API version 7.15)
msgmni has been set to 106
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
3 Y9 m% ~, o) zio scheduler noop registered (default)
create proc entry led success!
: b7 Q2 G: N# M6 SRalink gpio driver initialized
7 t7 ~3 ?9 g- g, ZSerial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
- }$ ~; }% R3 hserial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
brd: module loaded
deice id : ef 40 18 0 0 (40180000)
: r, |* T5 `" j' ?W25Q128BV(ef 40180000) (16384 Kbytes)
3 C1 y9 g4 M! k& u9 L& ^. ymtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 65536
Creating 7 MTD partitions on "raspi":
  Q9 _# p' y8 F- |6 V0x000000000000-0x000001000000 : "ALL"
% ?6 g* l/ F9 y+ n+ m0x000000000000-0x000000030000 : "Bootloader"
0x000000030000-0x000000040000 : "Config"
0x000000040000-0x000000050000 : "Factory"
0x000000050000-0x0000007b0000 : "Kernel"
8 U. {3 N+ I1 l6 v; G& _3 O0 ~% m0x0000007b0000-0x0000007f0000 : "modules"
# w; y. q* h1 F+ U/ y0x0000007f0000-0x000000800000 : "buginfo"
1 W% w* ^4 k! B! j, Y& l3 Erdm_major = 253
# I1 B* c& `# }0 D( u" ESMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43762077
/ V& t' @- l6 z& ~3 Z% y% iRalink APSoC Ethernet Driver Initilization. v3.0  256 rx/tx descriptors allocated, mtu = 1500!
7 ?- T* A% D6 `/ [NAPI enable, Tx Ring = 1024, Rx Ring = 256
SMACCR1 -- : 0x0000000c
' ^5 T, c2 I$ h( F) y$ f: BSMACCR0 -- : 0x43762077
PROC INIT OK!
( a- P* I: I5 ?4 Y+ ?: I3 A( @$ JPPP generic driver version 2.4.2
PPP Deflate Compression module registered
* l) t+ a5 ]2 o# l% l" i$ v. ~PPP BSD Compression module registered
3 A$ u# g0 _7 uPPP MPPE Compression module registered
$ g9 Z* ^. Q0 lNET: Registered protocol family 24
, s# A0 g9 A8 r1 ePPTP driver version 0.8.5
4 r, }& R& A( Q# i: n+ m2 `" b( stun: Universal TUN/TAP device driver, 1.6
5 R' X  L; P) x0 {0 ?) Ttun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
jhl_order: (C) 2007 jianhl
jhl_share_init  start
& Z6 z0 B# {) D1 H3 y. ~jhl_share_init ok
# o) u4 ~9 x' B$ B9 A8 tjhl_ipdo_init: (C) 2009 jianhl
ksys_log : create a netlink socket ok!
! P. o$ t: f% P! W) t" {# Cjianhl_arp_init  start
jhl hostinfo init
jhl_conn_init start
jhl_conn_init end
3 ]1 ?, g7 j' |: Y, [; y) kjhl_dns_cache_init ok
  n4 C3 [7 m, H% o5 s; @: A7 c9 h/ X& Ajhl_dnsc_rule_init start
, s$ m: l5 v! m; xjhl_pppoe_init start
jhl_pppoe_init ok
3 o( j% w: U' |6 d0 njhl_user_init ok
# f' e6 l' t' Z' c# `! i. j+ gjhl_session_init start
- ], w$ I! r  e% P5 W8 A: Kjhl_session_init ok
jhl_nvram_init: (C) 2007 jianhl
jhl_msg_init start
mroute_init: (C) 2009 jianhl
jingx_init: (C) 2007 jianhl
1 [$ t4 e. C4 V$ H( ~) Sjhl_ddos_init ok
3 A3 h. T0 s+ V" Yjhlradius : create a netlink socket ok!
5 f3 t* [, B; J* r7 ]( A/ R4 p5 Tshibie_url_init ok
jhl_url_init ok
+ B5 w: S% }0 B" e( Z: \- S3 uurlrd_init: (C) 2009 jianhl
- s7 H, {3 @8 O* H* ?fastping_init: (C) 2009 jianhl
http_init: (C) 2014 jianhl
( I' j/ }, l( w: e* H4 ssimple_cache_init: (C) 2013 jianhl
5 {0 x* t, s3 v: u5 pjianhl_anyip_init ok
jianhl_br_init  
2 \  ?4 E/ P6 v( S+ U/ V9 ?jhl_third_auth_init ok
% J- n. I5 \! l( X, o! H0 hjhl_simple_gg_init start
" G' ~6 }) ~- f% zNetfilter messages via NETLINK v0.30.
- S+ X) S, N5 \nf_conntrack version 0.5.0 (850 buckets, 3400 max)
1 p1 l* ]% d" e5 _4 @! f! v1 B" actnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
matchsize=264
, E! @+ n  V0 O% `. oxt_time: kernel timezone is -0000
+ q5 ^2 ~2 s% B9 bGRE over IPv4 demultiplexor driver
" I: y( U* M% j4 u  W' mgre: can't add protocol
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Linux
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
( n3 ]& H; r7 A" GNET: Registered protocol family 17
5 M4 [  }( c: Y$ UNET: Registered protocol family 15
( _/ c: ]7 @4 u) e7 ?802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
; e' i3 |) y% |& R! nAll bugs added by David S. Miller <davem@redhat.com>
8 q9 Y7 z6 m+ |1 U6 [Freeing unused kernel memory: 4672k freed
, A  K* R) z0 y; A/ ~( E
8 |9 U$ Z5 s0 \2 o# K9 w5 l, K4 H' p
. b; s6 W3 I- v. Q2 AHit ENTER for console...

Algorithmics/MIPS FPU Emulator v1.5
( k. A( h; G# J( }) D
' _- D& s& {4 i- ~Performed 4762 set and 0 unset operations. 10 required no changes.
% J2 N7 q5 k* ^" q2 j$ o1 qNot commiting.
1 \, P- q+ @' o( |$ y2 N1 r
- C4 D  ~. x: r0 f8 c& ogoing to insmod wys_pg2.ko

md5 checking succeed!
4 l2 ?& G9 I/ H& S" D; Rwys_pg2: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
5 O+ h* x8 [  D# d' Y' \/ o, h3 u/ uShiBie_LV0_Init xxxxxx start
# t9 O. ^5 d$ ^2 i1 m: DLV_http_Init start
LV_P2P_XunLei_Init start
. m. G/ Y6 c1 a  W( hLV_WLYY_Init start
LV_Mobile_Init start
LV_DianShi_Init start
LV_gupiao_Init start
LV_tongxin_app_Init start
0 N  `8 h2 [% l- B  jLV_GameMaintenance_Init start
  h7 l! C2 A6 CLV_YouXi_Init start
! J. o+ `% o5 B' g7 a& nLV_YunPan_Init start
LV_Mobile_Game_Init start
wys_pg2 insert succeedly!
switch reg write offset=2004, value=ff0003
switch reg write offset=2104, value=ff0003
switch reg write offset=2204, value=ff0003
$ z. \/ j. t# nswitch reg write offset=2304, value=ff0003
switch reg write offset=2404, value=ff0003
3 i# \) F' z" ]6 `$ a9 |# j7 Kswitch reg write offset=2504, value=ff0003
switch reg write offset=2010, value=810000c0
- w% ?% p5 A' c, |0 pswitch reg write offset=2110, value=810000c0
switch reg write offset=2210, value=810000c0
switch reg write offset=2310, value=810000c0
6 Z) A* ~8 d* D. ^& F1 \: I( Gswitch reg write offset=2410, value=810000c0
& Q3 E" R7 z/ W0 E! S% v0 ^& q1 H; E3 [switch reg write offset=2510, value=810000c0
switch reg write offset=2610, value=81000000
8 {! O6 s+ H& y+ j& Lswitch reg write offset=2710, value=81000000
/ [- q; _% e' ?% b4 R% tswitch reg write offset=2604, value=20ff0003
0 s1 f4 y" L5 g4 j1 mswitch reg write offset=2704, value=20ff0003
6 o4 m  u' T) J% b- [0 `12345
6 o6 |/ c. e: \8 d8 nswitch reg write offset=2014, value=10001
switch reg write offset=2114, value=10002
switch reg write offset=2214, value=10003
switch reg write offset=2314, value=10004
* h4 U' J  E7 S% q  S. C) L4 {switch reg write offset=2414, value=10005
switch reg write offset=2514, value=10006
. B1 l& ^2 `* P$ E, A" \REG_ESW_WT_MAC_ATC is 0x7ff0002
: Q, h, F1 I3 T: ~done.
# I) I6 {! B) B  T* z1 R! @Raeth v3.0 (NAPI
0 U- R# ~9 U, M1 x)
' }* s0 s/ P; W* l
4 K  C* Z% c1 O! Y3 A$ \  aphy_tx_ring = 0x00464000, tx_ring = 0xa0464000
- {6 @9 I7 U, a5 }( k* `! j
phy_rx_ring0 = 0x00463000, rx_ring0 = 0xa0463000
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43762077
ESW: Link Status Changed - Port0 Link UP
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
ra2880stop()...Done
Free TX/RX Ring Memory!
/ E1 n( B' V; b. S4 R9 [Raeth v3.0 (NAPI
)
8 C: i2 B: \$ s# u3 I
% s! x0 ~" U8 b; R7 L# q! [phy_tx_ring = 0x027ac000, tx_ring = 0xa27ac000

6 P8 o) }3 b( A+ c) j% Hphy_rx_ring0 = 0x0046f000, rx_ring0 = 0xa046f000
SMACCR1 -- : 0x00008081
  w; u7 Z; g7 ^* O" j9 v* W" B- FSMACCR0 -- : 0x001d4981
CDMA_CSG_CFG = 81000000
: Y4 K' H, j+ q6 [& m. DGDMA1_FWD_CFG = 20710000
device eth2 entered promiscuous mode
' d3 p7 C% s5 h9 L% V! [# A& A  W
- O3 Y- J5 y0 t7 H0 z' U! Z
=== pAd = c0731000, size = 785480 ===

- L; O" z. N3 }! }  g/ q, I<-- RTMPAllocTxRxRingMemory, Status=0
) a( A) V& u7 {4 m<-- RTMPAllocAdapterBlock, Status=0

$ X# |& D, a9 d+ G% ^----name:ra0--pAd:c0731000--
RX DESC a27f2000  size = 4096
$ {  a7 t" V3 r: A& I8 ?1 h1. Phy Mode = 9
2. Phy Mode = 9
rtmp_ee_flash_init() ok
- j7 ?* Y) G- R3. Phy Mode = 9
AntCfgInit: primary/secondary ant 0/1
Current Temperature from BBP_R49=0xffffffef
9 j5 b( v: ?4 W% d( O, W& PMCS Set = ff ff 00 00 00
1 T3 N; ?$ S0 EMain bssid = 80:81:00:1d:49:88
. x$ L- O1 O$ V: I6 N% G  x0 E" x8 i<==== rt28xx_init, Status=0
0x1300 = 00064380
8 \! i$ D9 w- b4 udevice ra0 entered promiscuous mode
device ra1 entered promiscuous mode
# t) P" b3 ?1 x2 Sdevice ra2 entered promiscuous mode
0 r: O  I( q/ ?6 `reset dual lan end
br1: port 1(ra0) entering forwarding state
br1: port 1(ra0) entering forwarding state
br2: port 1(ra1) entering forwarding state
" L6 H; U3 k; L' C/ Y' b% {br2: port 1(ra1) entering forwarding state
5 g2 s' q( O. W' ~6 r, _9 tbr3: port 1(ra2) entering forwarding state
br3: port 1(ra2) entering forwarding state
/ ]/ [1 r& q6 l9 iESW: Link Status Changed - Port0 Link Down
ESW: Link Status Changed - Port0 Link UP
led=38, on=4000, off=1, blinks,=1, reset=1, time=4000
led=9, on=4000, off=1, blinks,=1, reset=1, time=4000
system init ok
Factory test start init
set r[jhl_fact_test_opt:910]Factory Test Start Router,LAN:eth2.1,WAN:eth2.5
/ i. C6 I9 g4 I" N# w2 v, N
ole!!
ok
Factory test init OK
6 _! v/ ]. Z% E

nnsat

开启终端，加电的同时按下enter，进入LINUX系统，登录用户名密码试一下root和admin，是维盟的默认。
然后查找配置文件，看看能不能找到web登录帐号密码

1053541731

nnsat 发表于 2018-1-10 22:20
0 ]3 c* I0 L; M开启终端，加电的同时按下enter，进入LINUX系统，登录用户名密码试一下root和admin，是维盟的默认。
' w' ?' P0 E8 s. G% r  g然后 ...

8 V, C: g# b' _密码实在解不出来，已刷华硕N14固件，正常使用中。


在此，谢谢各位帮忙！