Hacking COMPLETED Fusee-LEDE Dongle (6$ payload injector)

[Waip]

OK I got it to boot by putting the mini_lucy_web_wifi.bin on a usb stick, it flashed blue then red then I can access the LUCI OpenWrt when plugging my ethernet straight to it from PC
However trying to flash the correct boot image it says mtd-write: not found
At least it's not completely bricked but it's not booting by itself

Any help ? xD

 

[KsAmJ]

David Buchanan already explained his great work on this thread but it is now mixed up with other projects so i created this dedicated thread.

The router i bought is this one from AliExpress.

View attachment 133104

I followed David's instructions without any issues
Find attached the already compiled binary file (firmware.bin) for those who want to save some time on compiling.

The update method from the original router website failed (seems common), so i used the USB drive method explained here.
(Only difference was my USB Flash drive popped on /dev/sda and not /dev/sda1)

After rebooting it, the router IP is set to static as 192.168.1.1 so you may need to connect it with an ethernet cable to your computer and force its IP address to 192.168.1.2

Then using WinSCP to connect to the new IP of the router, you can edited /etc/config/network to change it back to DHCP :

config interface 'lan'
    option type 'bridge'
    option ifname 'eth0'
    option proto 'dhcp'

To change the payload (which is fusee by default), use WinSCP to connect to the router and replace /usr/share/fusee-nano/payload.bin

View attachment 133105

Edit : Please find a new default firmware with WiFi enabled at startup (SSID is LEDE, no password), DHCP client enabled by default for ethernet, and SXOS payload as default

Edit 2 : You'll find better images in the following topic that include USB key payload update.

so my device came today and used the configuration from the link
https://openwrt.org/toh/unbranded/a5-v11
i replaced the firmware.bin with the last attahcment with the built in SXOS and LEDE one
the problem now there is nothing happens when i attach the switch to the router
there is no networks shown at all
and the device when powered not getting a red then flash blue like before it is ONLY flash blue
i don't know which bootloader to boot i used the 256 one

then i tried another router flashed what mentioned on the guide with the openWRT image only and didn't work at all stuck in red

i can't access the devices anymore as it seems i f*** up the firmware as also the guide is not clear enough to follow

i need HELP WHAT TO DO NOWWWWWW???????

 

[Akira]

Will this work?

Spoiler

If so, how should i start? Im new to these routers and stuff so please bear with me. I just dont want to start and put/do things that im not sure of

 

[RazorX2014]

anyone know how to put the switch-lakka payload on one of these once you have fusee-lede running?
https://www.ebay.co.uk/itm/Portable...e=STRK:MEBIDX:IT&_trksid=p2057872.m2749.l2649

i tried putting the coreboot.rom and cbfs.bin but it says i don't have enough space, together there exactly 1mb

 

[FGFlann]

anyone know how to put the switch-lakka payload on one of these once you have fusee-lede running?
https://www.ebay.co.uk/itm/Portable-Mini-150Mbps-3G-WIFI-Mobile-Wireless-Router-Hotspot-1800mAh-Powerbank/202352280198?ssPageName=STRK:MEBIDX:IT&_trksid=p2057872.m2749.l2649

i tried putting the coreboot.rom and cbfs.bin but it says i don't have enough space, together there exactly 1mb

Compressed they are around 300kb. You could include a script at boot or at time of injection that would decompress the archive to the ramdisk at /tmp. Alternatively they would have to be downloaded from a remote server each time.

 

[KsAmJ]

Compressed they are around 300kb. You could include a script at boot or at time of injection that would decompress the archive to the ramdisk at /tmp. Alternatively they would have to be downloaded from a remote server each time.

i followed this guide on 2 devices
https://openwrt.org/toh/unbranded/a5-v11
and it seems it brick the device. no wifi no nothing. one stuck with solid red light now the other doesn't show red only flashing blue from begining
any idea how to unbrick it?

 

[FGFlann]

i followed this guide on 2 devices
https://openwrt.org/toh/unbranded/a5-v11
and it seems it brick the device. no wifi no nothing. one stuck with solid red light now the other doesn't show red only flashing blue from begining
any idea how to unbrick it?

The solid red light is normally a sign that it has been flashed successfully. Depending on which firmware.bin you used it could be normal to not have wifi anymore. If it's the original firmware.bin from this thread, it will require you to manually alter your ethernet settings to get access to it again.
If you flashed the bootloader (uboot) successfully, you can try the flash drive upgrade method to flash a newer firmware.bin which will activate wifi for you automatically. Do this by putting the new firmware.bin on a FAT formatted flash drive, insert it into the dongle, then turn it on while holding the reset button.

 

[KsAmJ]

The solid red light is normally a sign that it has been flashed successfully. Depending on which firmware.bin you used it could be normal to not have wifi anymore. If it's the original firmware.bin from this thread, it will require you to manually alter your ethernet settings to get access to it again.
If you flashed the bootloader (uboot) successfully, you can try the flash drive upgrade method to flash a newer firmware.bin which will activate wifi for you automatically. Do this by putting the new firmware.bin on a FAT formatted flash drive, insert it into the dongle, then turn it on while holding the reset button.

what is the firmware on the link (openWRT or the one with SX OS)

 

[FGFlann]

what is the firmware on the link (openWRT or the one with SX OS)

The payload is customizable, so it can be whatever you want once it's up and running.

 

[KsAmJ]

The payload is customizable, so it can be whatever you want once it's up and running.

there is 3 files which one should i flash

 

[FGFlann]

there is 3 files which one should i flash

firmware.bin if using the method I described.

 

[KsAmJ]

firmware.bin if using the method I described.

OMG it is alive now i see 3GWIFI_XXXX
what should i do next???

 

[FGFlann]

OMG it is alive now i see 3GWIFI_XXXX
what should i do next???

Great. Now you can put the payload.bin of your choice on the flash drive and insert it into the dongle while it's turned on, and it will install the payload for you. It will flash blue twice to indicate success. Then you're ready to use it on your switch.

 

[KsAmJ]

Great. Now you can put the payload.bin of your choice on the flash drive and insert it into the dongle while it's turned on, and it will install the payload for you. It will flash blue twice to indicate success. Then you're ready to use it on your switch.

i added the payload while the device was on nothing flashed
should i restart the power and insert the usb before it

 

[FGFlann]

i added the payload while the device was on nothing flashed
should i restart the power and insert the usb before it

Is it named payload.bin? It needs to have the correct name to auto update.

 

[KsAmJ]

Is it named payload.bin? It needs to have the correct name to auto update.

what i done there was 3 files inside the zip
i took the 1st on firmware.bin (other 2 with long names) added to my FAT memory and it flashed as u mentioned
then i took the SXOS bin payload named it payload.bin put it on same flash and while it powered on on steady red i inserted it
but nothing flashing back from the router
is there other way or something i done is wrong?

 

[FGFlann]

what i done there was 3 files inside the zip
i took the 1st on firmware.bin (other 2 with long names) added to my FAT memory and it flashed as u mentioned
then i took the SXOS bin payload named it payload.bin put it on same flash and while it powered on on steady red i inserted it
but nothing flashing back from the router
is there other way or something i done is wrong?

Normally that should work. I guess it doesn't like something about your flash drive. The other way to update the payload is to connect to its wifi, use an SCP client like WinSCP, connect to 10.1.5.1 with the username 'root' and no password. Navigate to /usr/share/fusee-nano/ and put your new payload.bin there.

 

[KsAmJ]

Normally that should work. I guess it doesn't like something about your flash drive. The other way to update the payload is to connect to its wifi, use an SCP client like WinSCP, connect to 10.1.5.1 with the username 'root' and no password. Navigate to /usr/share/fusee-nano/ and put your new payload.bin there.

Thaaaaaaank Yoooooou soooooo much

i though i just bricked it with no hope to make it work
This is the best thing ever

 

[FGFlann]

Thaaaaaaank Yoooooou soooooo much

i though i just bricked it with no hope to make it work
This is the best thing ever

Great stuff. I'm glad it worked out.

 

[Localhorst86]

I had a similar issue. I purchased a second one of these routers, this time it arrived with a different firmware (entirely in Chinese) and required a different installation process than my previous Qualcomm branded one. After a few tries I managed to get fuse lede on this one, too. Injecting the payload onto my switch worked fine but I wasn't able to change the payload using a USB stick (which worked on my older lede device, though.

I had to reflash the sysupgrade image using the "mtd -r" command and then it started to work with the USB stick as well.

Gesendet von meinem Mi A1 mit Tapatalk