Site updated: 2023-04-16 12:32:04
This commit is contained in:
1 parent
c49a14c070
commit
835394c76d
155 files changed
+344
-233
No files matched your search
@@ -8,7 +8,7 @@
|
||||
<author>
|
||||
<name>Hito Li</name>
|
||||
</author>
|
||||
<updated>2023-02-18T09:42:00.000Z</updated>
|
||||
<updated>2023-04-16T03:03:00.000Z</updated>
|
||||
<category term="hito" />
|
||||
<category term="無言" />
|
||||
<category term="博客" />
|
||||
@@ -17,6 +17,89 @@
|
||||
<category term="心得体会" />
|
||||
<category term="技术分享" />
|
||||
<category term="踩坑" />
|
||||
<entry>
|
||||
<id>https://hitoli.com/2023/04/16/%E7%83%BD%E7%81%AB10G-ONU%E5%A4%A9%E7%BF%BC%E7%BD%91%E5%85%B34-0%E7%A0%B4%E8%A7%A3%EF%BC%88HG5143F/</id>
|
||||
<title>烽火10G-ONU天翼网关4.0破解(HG5143F)</title>
|
||||
<link rel="alternate" href="https://hitoli.com/2023/04/16/%E7%83%BD%E7%81%AB10G-ONU%E5%A4%A9%E7%BF%BC%E7%BD%91%E5%85%B34-0%E7%A0%B4%E8%A7%A3%EF%BC%88HG5143F/"/>
|
||||
<content type="html"><h4 id="开启telent"><a class="anchor" href="#开启telent">#</a> 开启 telent</h4>
|
||||
<p>注意:54XXXXXXXXC8 为光猫背后 ONU MAC:54-XX-XX-XX-XX-C8</p>
|
||||
<ol>
|
||||
<li>打开 http://192.168.X.X:8080 (网关地址) 使用密码登陆</li>
|
||||
<li>执行 http://192.168.X.X:8080/cgi-bin/telnetenable.cgi?key=54XXXXXXXXC8&amp;telnetenable=1</li>
|
||||
<li>用 telent 命令登陆<br />
|
||||
用户名:telecom 密码:nE7jA%5m</li>
|
||||
<li>获取 telnet 用户名密码</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>获取telnet的用户名</pre></td></tr><tr><td data-num="2"></td><td><pre>cfg_cmd get InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.TelnetUserName</pre></td></tr><tr><td data-num="3"></td><td><pre>获取telnet的密码</pre></td></tr><tr><td data-num="4"></td><td><pre>cfg_cmd get InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.TelnetPassword</pre></td></tr></table></figure><ol start="5">
|
||||
<li>转为 root 用户</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token function">su</span></pre></td></tr><tr><td data-num="2"></td><td><pre>密码:Fh@XXXXXX<span class="token punctuation">(</span>X为mac地址的后6位<span class="token punctuation">)</span></pre></td></tr></table></figure><ol start="6">
|
||||
<li>获取 web 超级密码</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd get InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccount.Password <span class="token operator">|</span> <span class="token function">grep</span> <span class="token string">'get success'</span> <span class="token operator">|</span> <span class="token function">cut</span> <span class="token parameter variable">-d</span> <span class="token operator">=</span> <span class="token parameter variable">-f</span> <span class="token number">2</span></pre></td></tr></table></figure><p>7、访问 http://192.168.1.1:8080/html/logoffaccount.html 把隐藏用户打开,其它选项改为可修改</p>
|
||||
<p>两种命令模式:</p>
|
||||
<h4 id="工厂模式"><a class="anchor" href="#工厂模式">#</a> 工厂模式</h4>
|
||||
<ol>
|
||||
<li>进入工厂模式</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>load_cli factory</pre></td></tr></table></figure><ol start="2">
|
||||
<li>显示管理员密码</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>show admin_pwd</pre></td></tr></table></figure><ol start="3">
|
||||
<li>显示所有命令</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>?</pre></td></tr></table></figure><ol start="4">
|
||||
<li>显示所有 show 命令</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>show ?</pre></td></tr></table></figure><ol start="5">
|
||||
<li>显示所有 set 命令</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token builtin class-name">set</span> ?</pre></td></tr></table></figure><ol start="6">
|
||||
<li>显示所有信息</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>show allinfo</pre></td></tr></table></figure><h4 id="cfg_cmd命令模式"><a class="anchor" href="#cfg_cmd命令模式">#</a> cfg_cmd 命令模式</h4>
|
||||
<ol>
|
||||
<li>开启 TELNET</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.TelnetEnable <span class="token number">1</span></pre></td></tr><tr><td data-num="2"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.TelnetUserName 用户名</pre></td></tr><tr><td data-num="3"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.TelnetPassword 密码</pre></td></tr></table></figure><ol start="2">
|
||||
<li>打开 FTP 功能</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.FtpEnable <span class="token number">1</span></pre></td></tr><tr><td data-num="2"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.FtpUserName 用户名</pre></td></tr><tr><td data-num="3"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_ServiceManage.FtpPassword 密码</pre></td></tr></table></figure><ol start="3">
|
||||
<li>获取 LOID</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd get InternetGatewayDevice.X_CT-COM_UserInfo.UserName <span class="token operator">|</span><span class="token function">grep</span> <span class="token string">'value'</span> <span class="token operator">|</span><span class="token function">cut</span> <span class="token parameter variable">-d</span> <span class="token string">'='</span> <span class="token parameter variable">-f</span> <span class="token number">2</span></pre></td></tr></table></figure><ol start="4">
|
||||
<li>TR069</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd get InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.Enable</pre></td></tr><tr><td data-num="2"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.Enable <span class="token number">0</span> <span class="token comment">#0 禁用,1 启用</span></pre></td></tr><tr><td data-num="3"></td><td><pre>cfg_cmd get InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.VLANIDMark</pre></td></tr><tr><td data-num="4"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.VLANIDMark <span class="token number">99</span> <span class="token comment">#默认 46</span></pre></td></tr><tr><td data-num="5"></td><td><pre>cfg_cmd get InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.Mode</pre></td></tr><tr><td data-num="6"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.Mode <span class="token number">2</span> <span class="token comment">#默认 2</span></pre></td></tr><tr><td data-num="7"></td><td><pre>cfg_cmd get InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_AccessControl.Enabled</pre></td></tr><tr><td data-num="8"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_AccessControl.Enabled <span class="token number">0</span> <span class="token comment">#0 禁用,1 启用</span></pre></td></tr><tr><td data-num="9"></td><td><pre>cfg_cmd get InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.Enable</pre></td></tr><tr><td data-num="10"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.Enable <span class="token number">0</span> <span class="token comment">#0 禁用,1 启用</span></pre></td></tr></table></figure><ol start="5">
|
||||
<li>关闭 TR069 中间件</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt.Tr069Enable <span class="token number">0</span></pre></td></tr></table></figure><ol start="6">
|
||||
<li>删除 1_TR069_R_VID_46</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.X_CT-COM_WANEponLinkConfig.IP_Routed<span class="token operator">=</span><span class="token string">''</span></pre></td></tr></table></figure><ol start="7">
|
||||
<li>查看设备目前的连接数</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd get InternetGatewayDevice.Services.X_CT-COM_MWBAND.TotalTerminalNumber</pre></td></tr></table></figure><ol start="8">
|
||||
<li>设置设备连接数</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">set</span> InternetGatewayDevice.Services.X_CT-COM_MWBAND.TotalTerminalNumber <span class="token number">255</span></pre></td></tr></table></figure><ol start="9">
|
||||
<li>用户信息</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd get InternetGatewayDevice.X_CT-COM_UserInfo.UserName</pre></td></tr></table></figure><ol start="10">
|
||||
<li>获取 cfg_cmd 帮助</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd <span class="token builtin class-name">help</span></pre></td></tr></table></figure><ol start="11">
|
||||
<li>获取指定节点后的节点</li>
|
||||
</ol>
|
||||
<figure class="highlight bash"><figcaption data-lang="bash"></figcaption><table><tr><td data-num="1"></td><td><pre>cfg_cmd shownode InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1. <span class="token punctuation">[</span><span class="token number">0</span><span class="token operator">|</span><span class="token number">1</span><span class="token punctuation">]</span> </pre></td></tr><tr><td data-num="2"></td><td><pre>(如cfg_cmd shownode InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1. <span class="token punctuation">[</span><span class="token number">0</span><span class="token punctuation">]</span>)</pre></td></tr></table></figure></content>
|
||||
<category term="生活" scheme="https://hitoli.com/categories/%E7%94%9F%E6%B4%BB/" />
|
||||
<category term="技术分享" scheme="https://hitoli.com/categories/%E7%94%9F%E6%B4%BB/%E6%8A%80%E6%9C%AF%E5%88%86%E4%BA%AB/" />
|
||||
<category term="烽火" scheme="https://hitoli.com/tags/%E7%83%BD%E7%81%AB/" />
|
||||
<category term="天翼网关" scheme="https://hitoli.com/tags/%E5%A4%A9%E7%BF%BC%E7%BD%91%E5%85%B3/" />
|
||||
<category term="破解" scheme="https://hitoli.com/tags/%E7%A0%B4%E8%A7%A3/" />
|
||||
<category term="HG5143F" scheme="https://hitoli.com/tags/HG5143F/" />
|
||||
<updated>2023-04-16T03:03:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://hitoli.com/2023/02/18/%E4%BF%AE%E6%94%B9IntellIJ-IDE%E8%83%8C%E6%99%AF%E8%89%B2%E5%92%8C%E5%AD%97%E4%BD%93%E5%A4%A7%E5%B0%8F/</id>
|
||||
<title>修改IntellIJ IDE背景色和字体大小</title>
|
||||
@@ -225,8 +308,8 @@
|
||||
<category term="服务" scheme="https://hitoli.com/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||||
<category term="Nginx" scheme="https://hitoli.com/categories/Linux/%E6%9C%8D%E5%8A%A1/Nginx/" />
|
||||
<category term="Nginx" scheme="https://hitoli.com/tags/Nginx/" />
|
||||
<category term="Tengine" scheme="https://hitoli.com/tags/Tengine/" />
|
||||
<category term="动态域名解析" scheme="https://hitoli.com/tags/%E5%8A%A8%E6%80%81%E5%9F%9F%E5%90%8D%E8%A7%A3%E6%9E%90/" />
|
||||
<category term="Tengine" scheme="https://hitoli.com/tags/Tengine/" />
|
||||
<updated>2022-11-30T08:35:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
@@ -240,8 +323,8 @@
|
||||
<category term="服务" scheme="https://hitoli.com/categories/Linux/%E6%9C%8D%E5%8A%A1/" />
|
||||
<category term="Nginx" scheme="https://hitoli.com/categories/Linux/%E6%9C%8D%E5%8A%A1/Nginx/" />
|
||||
<category term="Nginx" scheme="https://hitoli.com/tags/Nginx/" />
|
||||
<category term="stream" scheme="https://hitoli.com/tags/stream/" />
|
||||
<category term="Tengine" scheme="https://hitoli.com/tags/Tengine/" />
|
||||
<category term="stream" scheme="https://hitoli.com/tags/stream/" />
|
||||
<updated>2022-11-30T08:09:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
@@ -608,36 +691,4 @@
|
||||
<category term="自动更新" scheme="https://hitoli.com/tags/%E8%87%AA%E5%8A%A8%E6%9B%B4%E6%96%B0/" />
|
||||
<updated>2022-10-31T07:30:00.000Z</updated>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://hitoli.com/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/</id>
|
||||
<title>极空间web端https直连nginx配置</title>
|
||||
<link rel="alternate" href="https://hitoli.com/2022/10/27/%E6%9E%81%E7%A9%BA%E9%97%B4web%E7%AB%AFhttps%E7%9B%B4%E8%BF%9Enginx%E9%85%8D%E7%BD%AE/"/>
|
||||
<content type="html"><h4 id="介绍"><a class="anchor" href="#介绍">#</a> 介绍</h4>
|
||||
<ul>
|
||||
<li>ip 直连一般都映射了 5055, 但是直接访问 5055 极空间只提供了 http 协议,如果希望使用 https 协议则必须使用其它端口进行访问。以下方案采用 nginx 反向代理实现,端口使用 10000 举例。<br />
|
||||
<img data-src="https://nas.hitoli.com:18014/images/2022/10/27/2022-10-27-14-39-25.jpg" alt="" /></li>
|
||||
</ul>
|
||||
<h4 id="配置"><a class="anchor" href="#配置">#</a> 配置</h4>
|
||||
<ol>
|
||||
<li>需要先把 10000 端口在路由器上做好映射。</li>
|
||||
<li>证书生成好并放置到 nginx 上。(证书生成方法不做介绍请自行百度)</li>
|
||||
<li>http 跳转 https 配置</li>
|
||||
</ol>
|
||||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="2"></td><td><pre> if ($scheme = http) <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="3"></td><td><pre> rewrite ^(.<span class="token important">*)$</span> https<span class="token punctuation">:</span>//$host$1 permanent;</pre></td></tr><tr><td data-num="4"></td><td><pre> <span class="token punctuation">&#125;</span></pre></td></tr><tr><td data-num="5"></td><td><pre><span class="token punctuation">&#125;</span></pre></td></tr></table></figure><ol start="4">
|
||||
<li>web 端口监听配置</li>
|
||||
</ol>
|
||||
<figure class="highlight yaml"><figcaption data-lang="YAML"></figcaption><table><tr><td data-num="1"></td><td><pre><span class="token comment">#极空间 - web</span></pre></td></tr><tr><td data-num="2"></td><td><pre>server <span class="token punctuation">&#123;</span></pre></td></tr><tr><td data-num="3"></td><td><pre> listen 10000 ssl http2; <span class="token comment">#ipv4</span></pre></td></tr><tr><td data-num="4"></td><td><pre> listen <span class="token punctuation">[</span><span class="token punctuation">:</span><span class="token punctuation">:</span><span class="token punctuation">]</span><span class="token punctuation">:</span>10000 ssl http2; <span class="token comment">#ipv6</span></pre></td></tr><tr><td data-num="5"></td><td><pre> server_name xxx.xxx.com; <span class="token comment">#填写自己的域名,主域名或者子域名</span></pre></td></tr><tr><td data-num="6"></td><td><pre></pre></td></tr><tr><td data-num="7"></td><td><pre> <span class="token comment">#include /etc/nginx/conf.d/ssl/ssl_common.conf;</span></pre></td></tr><tr><td data-num="8"></td><td><pre> ssl_certificate_key /etc/nginx/conf.d/ssl/xxx.key; <span class="token comment">#加密证书</span></pre></td></tr><tr><td data-num="9"></td><td><pre> ssl_certificate /etc/nginx/conf.d/ssl/xxx.pem; <span class="token comment">#加密证书</span></pre></td></tr><tr><td data-num="10"></td><td><pre> ssl_session_timeout 1d;</pre></td></tr><tr><td data-num="11"></td><td><pre> ssl_session_cache shared<span class="token punctuation">:</span>MozSSL<span class="token punctuation">:</span>10m;</pre></td></tr><tr><td data-num="12"></td><td><pre> ssl_session_tickets off;</pre></td></tr><tr><td data-num="13"></td><td><pre> ssl_protocols TLSv1.2 TLSv1.3;</pre></td></tr><tr><td data-num="14"></td><td><pre> ssl_ciphers ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA256<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA256<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>AES256<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA384<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES256<span class="token punctuation">-</span>GCM<span class="token punctuation">-</span>SHA384<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>ECDSA<span class="token punctuation">-</span>CHACHA20<span class="token punctuation">-</span>POLY1305<span class="token punctuation">:</span>ECDHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>CHACHA20<span class="token punctuation">-</span>POLY1305<span class="token punctuation">:</span>DHE<span class="token punctuation">-</span>RSA<span class="token punctuation">-</span>AES128<span class="token punctuation">-</span>GCM<span class="token punctuation">-</sLine truncated
|
||||
<ul>
|
||||
<li>需要开启允许嵌套否则登陆后所有应用都是拒绝访问</li>
|
||||
<li>需要配置 proxy_redirect 替换响应 url,否则会跳转到默认 http 协议的 5055 端口</li>
|
||||
<li>如果配置 proxy_redirect 后无效可能需要清除浏览器缓存(F12 - 网络 - 右键点击 url 区域 - 清除浏览器缓存)</li>
|
||||
</ul>
|
||||
</content>
|
||||
<category term="极空间" scheme="https://hitoli.com/categories/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||||
<category term="nginx" scheme="https://hitoli.com/tags/nginx/" />
|
||||
<category term="极空间" scheme="https://hitoli.com/tags/%E6%9E%81%E7%A9%BA%E9%97%B4/" />
|
||||
<category term="https" scheme="https://hitoli.com/tags/https/" />
|
||||
<category term="web" scheme="https://hitoli.com/tags/web/" />
|
||||
<updated>2022-10-27T05:34:00.000Z</updated>
|
||||
</entry>
|
||||
</feed>
|
||||
Reference in new issue
Block a user