aleck wrote:
自回一下 安裝後訊號(恕刪)
請問一下安裝這種天線，需要改機還是原廠的接口就能安裝？
https://forums.whirlpool.net.au/archive/2515438
要先安裝 python , pyserial , putty
用putty 192.168.1.1 5510 telnet 用USB進入分享器 用AT!OPENLOCK?得到一組字串
在連結附的GITHUB https://gist.github.com/jkinred/73689e463a08af963c45c137df6646d0
下載.py 安裝完 python , pyserial後在.py目錄下開啟命令提示字元輸入以下
python sierrakeygen.py -l 字串 -d device
分享器對應的晶片device可以在.py裡面找到 ，執行後可以得到另一組字串
在putty 輸入AT!OPENLOCK="得到的字串" 就可以解鎖了，不過每次分享器重啟要在重新取得字串一次
連結網站有重設密碼，不過不用也沒關係
範例: 以下兩台都可以成功解鎖
AC810S_1TLAUS
python sierrakeygen.py -l E734756E9359F114 -d MDM9x40
MR1100_1TFUKS
python sierrakeygen.py -l 099146B5C4643047 -d MDM9x50_V1
都可以解鎖使用AT!BAND=鎖頻段和看支援的頻段資訊
AC810S_1TLAUS
0000000008000000 - B28
0000000000000080 - B8
0000000000000040 - B7
0000000000000004 - B3
0000000000000001 - B1
0002000000000000 - B8 (900)
0000000004000000 - B5 (850)
0000000000800000 - B2 (1900)
0000000000400000 - B1 (2100)
MR1100_1TFUKS
0000010000000000 - B41
0000008000000000 - B40
0000002000000000 - B38
0000000008000000 - B28
0000000000080000 - B20
0000000000000080 - B8
0000000000000040 - B7
0000000000000004 - B3
0000000000000001 - B1
0002000000000000 - B8 (900)
0000000004000000 - B5 (850)
0000000000800000 - B2 (1900)
0000000000400000 - B1 (2100)
目前也只有鎖頻段，不知道有沒有可以看到CA組合的或是其他實用的AT command
不知道有沒有人有做成可執行檔的得到字串的程式，這樣大家都可以自己破解了
以下為原內容備份
I was unable to get any of the previously discovered passwords (listed above by @abdullah1414) to work on my Telstra WiFi 4GX Advanced III (Netgear AC810s) running the latest firmware AC810S-1TLAUS_NTG9X40C_11.14.08.40_TELSTRA_05.02.
Instead, by extracting instructions from 4pda.ru I was able to change the ENTERCND password and then proceed to add the custom band configurations.
My particular use case has been local cells oversubscribed with visiting tourists (getting 0.2Kbps as a business customer), so I needed to force my modem to use alternate towers which I'm getting 30Mbps+ from.
Follow the instructions in this thread to connect to the device via USB and then telnet on port 5510.
Connect:
$ telnet 192.168.1.1 5510
Trying 192.168.1.1...
Connected to 192.168.1.1.
Escape character is '^]'.
AT!PACKAGE?
AC810S-1TLAUS_NTG9X40C_11.14.08.40_TELSTRA_05.02
Obtain a challenge:
AT!OPENLOCK?
DBA5D53217620C8C
Next, use a script contained in the 1_unlock.zip file from 4pda.ru to generate a response.
I have reproduced the script as a gist because it's a pretty wild ride learning how Russian numbers are written to get access to the file on 4pda.ru!
Configure Python libraries and generate the response:
python3 -m venv ./venv
./venv/bin/pip install pyserial
./venv/bin/python ./sierrakeygen.py -l DBA5D53217620C8C -d MDM9x40
AT!OPENLOCK="75272D0B1114FACB"
Next, paste the response to the device:
AT!OPENLOCK="75272D0B111FACB"
OK
AT!SETCND="your_new_password"
I was then able to proceed with executing privileged commands, such as adding new bands:
AT!ENTERCND="my_password"
OK
AT!BAND=04,"LTE B1 2100",0,1
OK
Hope this helps someone and saves them some time. So annoying that vendors don't keep these devices open by default.
內文搜尋
從 APP 打開
X