khoe OpenWrt cho FPT AX3000CV2 (vọc)

root@AX3000C:~# fw_printenv | grep eth1addr | cut -d= -f2 | tr -d ':'
30600A4A7E85
root@AX3000C:~# echo -n "30600A4A7E85FTEL" | md5sum | cut -d' ' -f1
3f875d8c5026090a5271645c8ab9e1a2

(async () => {
    const pwd = "<mật khẩu>";
    const sid = sessionStorage.getItem("sid");
    if (!sid) return console.error("pls login");

    const api = async (id, obj, method, args) =>
        (await fetch('/ubus', { method: 'POST', body: JSON.stringify({ jsonrpc: "2.0", id, method: "call", params: [sid, obj, method, args] }) })).json();

    try {
        console.log("setting password...");
        await api(1, "oui.network", "set_ssh_password", { password: pwd });

        console.log("starting dropbear...");
        await api(2, "oui.system", "init_action", { name: "dropbear", action: "start" });

        console.log("ok");
    } catch (e) {
        console.error("failed:", e);
    }
})();

#!/bin/sh

. /usr/share/libubox/jshn.sh

rule_idx_get()
{
        idx=0
        while [ $idx -lt 500 ]
        do
                idx=`expr $idx + 1`
                fwrulename="$(uci get firewall.@rule[$idx].name)"
                if [ x"$fwrulename" == "x" ]; then
#                       echo 'there is no firewall rule' > /dev/console
                        break
                fi

                if [[ "$fwrulename" =~ "$1" ]]; then
#                        echo get rule $idx > /dev/console
                        return $idx
                fi
        done
        return 0
}

ssh_get(){
        local wan_ssh_state="0"
        local lan_ssh_state="0"
        rule_idx_get "WAN-SSH"
        wan_rule_idx=$?
        wan_ssh_target="$(uci get firewall.@rule[$wan_rule_idx].target)"
        if [ "$wan_ssh_target" == "ACCEPT" ]; then
                wan_ssh_state="1"
        fi

        rule_idx_get "LAN-SSH"
        lan_rule_idx=$?
        lan_ssh_target="$(uci get firewall.@rule[$lan_rule_idx].target)"
        if [ "$lan_ssh_target" == "ACCEPT" ]; then
                lan_ssh_state="1"
        fi
        ssh_passwd="$(uci get dropbear.@dropbear[0].password)"

        json_init
        json_add_string "WANState" $wan_ssh_state
        json_add_string "LANState" $lan_ssh_state
        json_add_string "Password" $ssh_passwd
        json_dump

        return $wan_ssh_state$lan_ssh_state
}

ssh_set(){
        local wan_ssh_state="0"
        local lan_ssh_state="0"
        rule_idx_get "WAN-SSH"
        wan_rule_idx=$?
        if [ "$1" == "1" ]; then
                uci set firewall.@rule[$wan_rule_idx].target="ACCEPT"
                uci set firewall.@rule[$wan_rule_idx].enabled="1"
                uci set dropbear.@dropbear[1].enable="1"
        else
                uci set firewall.@rule[$wan_rule_idx].target="REJECT"
        fi

        rule_idx_get "LAN-SSH"
        lan_rule_idx=$?
        if [ "$2" == "1" ]; then
                uci set firewall.@rule[$lan_rule_idx].target="ACCEPT"
                uci set firewall.@rule[$lan_rule_idx].enabled="1"
                uci set dropbear.@dropbear[0].enable="1"
        else
                uci set firewall.@rule[$lan_rule_idx].target="REJECT"
        fi

        uci set dropbear.@dropbear[0].password=$3
        uci set dropbear.@dropbear[1].password=$3
        uci commit dropbear
        uci commit firewall
        /etc/init.d/firewall reload >/dev/null 2>/dev/null &
        /etc/init.d/dropbear restart &
}

case "$1" in
        list)
                echo '{ "set": { "enabled": "[1|0]"}, "get": {} }'
        ;;
        call)
                case "$2" in
                        set)
                                read input;
                                json_load "$input"
                                json_get_var WANState WANState
                                json_get_var LANState LANState
                                json_get_var Password Password
#                               ssh_get > /dev/null
#                               current_ssh_state=$?
#                               echo current_ssh_state $current_ssh_state > /tmp/ssh.log
#                               new_ssh_state=$WANState$LANState
#                               new_password="$(uci get dropbear.@dropbear[0].password)"
#                               if [ "$current_ssh_state" == "$new_ssh_state" -a "$new_password" == "$Password" ]; then
#                                       ssh_get
#                                       return
#                               fi

                                ssh_set $WANState $LANState $Password
#                               echo "change ssh password" > /dev/console
#                               sleep 3
                                echo -e "rpcd:\n@$(date -R)\nssh_enabled:$((${WANState} + ${LANState}));" > /tmp/passlog.txt 2>&1
                                if [ "${WANState}" == "1" -o "${LANState}" == "1" ]; then
                                echo -e "$Password\n$Password" | passwd root > /tmp/sshpaswd.log
                                else
                                        #console auth:
                                        AEI_ADMIN_PWD=`fw_printenv  | grep AeiAdminPwd | cut -d '=' -f 2`
                                        echo -e "ssh:${AEI_ADMIN_PWD}" >> /tmp/passlog.txt 2>&1
                                        echo -e "${AEI_ADMIN_PWD}\n${AEI_ADMIN_PWD}" | passwd root >> /tmp/passlog.txt 2>&1
                                fi
                                ssh_get
                        ;;
                        get)
                                ssh_get
                        ;;
                esac
        ;;
esac