MI router 4 - stok versions about openwrtinvasion HOT 8 CLOSED

python3 remote_command_execution_vulnerability.py
****************
router_ip_address: 192.168.31.1
stok: a5445597af88bf26af058d7098e67208
****************
start uploading config file...
start exec command...
done! Now you can connect to the router using telnet (user: root, password: none)
In MacOS, execute in the terminal:
telnet 192.168.31.1
root@worktime:~/OpenWRTInvasion# telnet 192.168.31.1
Trying 192.168.31.1...
telnet: Unable to connect to remote host: Connection refused

from openwrtinvasion.

I am not sure if the exploit is compatible with the new firmware 3.0.24. I asked here. Please report if you manage to make it work :)

from openwrtinvasion.

I am not sure if the exploit is compatible with the new firmware 3.0.24. I asked here. Please report if you manage to make it work :)

Actually I don't think that firmware is 3.0.24 ver.

And my question was about "stok version hashes". If I understand correctly each firmware ver has it's own stok hash. Right?
If I will use incorrect stok hash, it will not work. Correct?

Is there any database with stok hashes depending on firmware versions?
For example: If I need to know a stok hash for firmware 2.26.134?

from openwrtinvasion.

No. You get a new STOK every time you login to the router using the web interface. You get the STOK from the url. See the readme, it is explained there in a big picture with a red square.

from openwrtinvasion.

So if I don't know the password from 192.168.31.1 - it's not possible to use the hack?

No. You get a new STOK every time you login you the router using the web interface. You get the STOK from the url. See the readme, it is explained there in a big picture with a red square.

from openwrtinvasion.

You are correct, it’s not possible to hack the router without knowing the password

from openwrtinvasion.

You are correct, it’s not possible to hack the router without knowing the password

Hi acecilia, in my case, it did not asked the stok, and auto generate the different stok compare to the one from the web browser. What can I do in this case please?

from openwrtinvasion.

See the README 🙏

from openwrtinvasion.