History

Anime4000 26e3e5a5a4 Update README.md		2022-05-19 23:34:51 +08:00
..
README.md	Update README.md	2022-05-19 23:34:51 +08:00
fix_html_syntax.sh	Update fix_html_syntax.sh	2022-03-31 04:19:17 +08:00
qemu-test.sh	bug fix	2022-05-08 12:35:28 +08:00

README.md

RTL960x Emulator

This script allow you to modify and reverse engineering RTL9601C1 based firmware.

Prerequisite

You need these program installed:

tar (extract tar package)
squashfs-tools (extract/repack rootfs)
qemu-user-static (run MIPS VM)

Most Ubuntu based distro have tar and squashfs-tools installed!

Install

Download qemu-test.sh
Make executable chmod +x qemu-test.sh

Syntax

Pretty simple to do, script do everything, you simply play with it

.\qemu-test.sh firmware_file.tar

Ready

After you run, Terminal Emulator will land busybox just like telnet:

Installing: chroot QEMU MIPS
RTL960x Emulator is Running!


BusyBox v1.12.4 (2020-10-26 08:35:57 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#

During this screen, you can start modify the firmware, look into "firmware_file" folder.

V2801F 2.5GbE

There is way to make V2801F run 2.5GbE since RTL9601C1 SoC are supported, by copying /etc/runlansds.sh from TWCGPON657 to V2801F. Probably also need to copy /bin/sfpapp

TWCGPON657 B15 `/etc/runlansds.sh`

#!/bin/sh

lan_sds_mode=`flash get LAN_SDS_MODE | sed 's/LAN_SDS_MODE=//g'`
echo $lan_sds_mode > proc/lan_sds/lan_sds_cfg
echo 1 > proc/lan_sds/sfp_app
sfpapp &