search

acecilia / OpenWRTInvasion

Root shell exploit for several Xiaomi routers: 4A Gigabit, 4A 100M, 4, 4C, 3Gv2, 4Q, miWifi 3C...
1.45k stars 257 forks source link

{"code":1629,"msg":"解压失败，可能文件已经损坏"} 最新版本报错 我把print打开 #114

Closed weilingwei closed 2 years ago

weilingwei commented 2 years ago

stok: c4f1f0948134a8cd9de83ffed91b63a6

start uploading config file... http://192.168.31.1/cgi-bin/luci/;stok=c4f1f0948134a8cd9de83ffed91b63a6/api/misystem/c_upload {"code":1629,"msg":"解压失败，可能文件已经损坏"} start exec command... 请问这个怎么解决

Cxxxl commented 2 years ago

同样的问题 小米4A 百兆版 固件降到2.18.51也不行 ; payload.tar.gz文件本身是没有损坏的 可以正常解压 是我们刷的固件版本官方修复这漏洞了？ https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC/blob/master/report/report.md 这个报告里的远程任意文件读取漏洞在我本地测试也变成404了

Cxxxl commented 2 years ago

翻了官方论坛升级公告 https://web.vip.miui.com/page/info/mio/mio/detail?postId=5365416&app_version=dev.20051 更新是在漏洞爆出后一个月出的2.18.51 日志里写的修复了安全漏洞 是修了上面报告里的漏洞么？ 但是看readMe里 有用这个版本固件破解成功的 搞不明白了 求指点

acecilia commented 2 years ago

Sorry, I do not understand

LiuZhipeng99 commented 2 years ago

小米R3A，固件2.18.40也存在这个问题，但反复测试偶尔能上传并解压成功，还没发现原因。

Xiaomi R3A, firmware 2.18.40 also has this problem. After repeated tests, it can be uploaded and decompressed successfully occasionally, but the reason has not been found.