1
0
mirror of https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks.git synced 2025-09-03 05:02:40 +02:00
Files
xiaomi-dafang-hacks/hacks/getroot.md
jmtatsch ede2588ee9 Merge beta into master (#1825)
* Add Push To Talk (#1743)

* Fix video recording when using FTP or Dropbox (#1744) (#1745)

* This adds a new feature "Dropbox URL" so you can specify the URL to be used for (#1746)

* Change all absolute URL's to relative (#1748)

* Fix deleteFile in sdcard.js (#1749)

* Imporove security of Dropbox emulating web script (#1765)

Limit maximum file size and only allow certain file types

* Add full support for Matrix image and video #1756 (#1766)

* More robust Telegram video handling (#1769)

* Some cleanup in detectionOn.sh (#1764)

Co-authored-by: Steven <36535597+StevenJonSmith@users.noreply.github.com>
Co-authored-by: Chris Osgood <chris_github@functionalfuture.com>
Co-authored-by: Nick Kaijaks <Nick.Kaijaks@warwick.ac.uk>
2022-09-17 11:49:25 +02:00

27 lines
1.1 KiB
Markdown

# Getting Root Access
## Using U-Boot
1. Boot into Uboot(press a Key when booting)
2. Use the following Command to get a Root-Shell
### 128MB Devices
`setenv bootargs console=ttyS1,115200n8 mem=104M@0x0 ispmem=8M@0x6800000 rmem=16M@0x7000000 init=/bin/sh rootfstype=squashfs root=/dev/mtdblock2 rw mtdparts=jz_sfc:256k(boot),2048k(kernel),3392k(root),640k(driver),4736k(appfs),2048k(backupk),640k(backupd),2048k(backupa),256k(config),256k(para),-(flag)`
### 64MB Devices (S1 etc)
`setenv bootargs console=ttyS1,115200n8 mem=41700K@0x0 ispmem=8M@0x28B9000 rmem=15644K@0x30B9000 init=/bin/sh rootfstype=squashfs root=/dev/mtdblock2 rw mtdparts=jz_sfc:256k(boot),2048k(kernel),3392k(root),640k(driver),4736k(appfs),2048k(backupk),640k(backupd),2048k(backupa),256k(config),256k(para),-(flag)`
3. Boot into the Root-Shell using "boot"
## Using normal login (via serial connection)
Use following Credentials:
Username: root
Password: ismart12
Attention: You will get a lot of debug messages, and you wont be able to work "normal".
To cirvumvent this, it's recommended to start a telnet daemon: `telnetd &` and connect to the device via telnet.