XiaomiGateway3 icon indicating copy to clipboard operation
XiaomiGateway3 copied to clipboard

Telnet password on 1.5.6_0001

Open osigida opened this issue 1 year ago • 33 comments

This is not an issue, but the way to share info:

I've got a new Gateway 3 with 1.5.5_000? firmware installed. Unfortunately, I got it updated to 1.5.6_0001 before I realized there were issues with setting up. HA was not able to connect with the error wrong_telnet. I've enabled telnet by 5-2-2-2-2-2 clicks on the device as described on https://www.youtube.com/shorts/qJ21wWNE1Gg Then telnet became available, but it required a password.
And admin/admin worked 🎉 then I just followed https://github.com/zvldz/mgl03_fw/tree/main/firmware#the-easy-way and installed 1.5.4 version. And then successfully added the hub into HA

Hope, it is useful, feel free to close the ticket.

Thanks a lot for the plugin!!

osigida avatar Nov 27 '23 15:11 osigida

great job

uavana avatar Nov 29 '23 01:11 uavana

As I know, this won't work with all gateways from the market.

AlexxIT avatar Nov 29 '23 04:11 AlexxIT

I have the same problem with 1.5.6_0001. I tried to use 5-2-2-2-2-2, hub starts blinking pink and beeps. I try to connect via telnet (windows)

telnet 192.168.0.30 23
Connecting To 192.168.0.30...Could not open connection to the host, on port 23: Connect failed

What I'm doing wrong? p.s. I'm trying to integrate with HA at the end but it says Wrong open telnet command when I try to use telnet command as a Key.

chiefirr avatar Dec 04 '23 13:12 chiefirr

Hub should blink with green. Pink means you have reset the gateway.

AlexxIT avatar Dec 04 '23 14:12 AlexxIT

@AlexxIT from what I understood it blinks orange when it is reseted. At least it definitely blinked for very long with orange when I tried to reset it and I had to reconnect it to WiFi. When it blinks pink - it reconnects back normally and is visible in MiHome app.

chiefirr avatar Dec 04 '23 16:12 chiefirr

Hi, I have the same Gateway3, with 1.5.6_0001, never used for in HA, but now i would like to. I enabled telnet, tried to connect to, but i get "login incorrect" message. Am i doing something wrong or mine has other password? I tried "123123" and without password too. What else should i try?

apacukaa avatar Dec 09 '23 21:12 apacukaa

@apacukaa you may try to brute-force the password, something tells me it should be something simple.

osigida avatar Dec 13 '23 20:12 osigida

Good day! i need help with the same problem. i have a telnet access to GW 3 - but credientals - admin/admin, root/root and etc... doesn't work. i want to add GW to HomeAssistant (i have token and telnet error...) image

dandymsk avatar Dec 19 '23 20:12 dandymsk

@dandymsk, if you do have telnet access, try to install 1.5.4 FW as explained here: https://github.com/zvldz/mgl03_fw/tree/main/firmware#the-easy-way

osigida avatar Dec 20 '23 12:12 osigida

牛x的密码。成功解决了降级的问题。

ss109 avatar Jan 07 '24 03:01 ss109

牛x的密码。成功解决了降级的问题。

@ss109 Please help me. what login do you use ? i've tried - login - admin password - Bull's eye / Bullseye / bullseye but it still doesn't work ...(((

dandymsk avatar Jan 07 '24 13:01 dandymsk

@dandymsk I saw two options, login admin and either no password at all or admin as the password

osigida avatar Jan 08 '24 13:01 osigida

admin/admin didn't work for me unfortunately... Got login incorrect error

p1ratrulezzz avatar Jan 12 '24 14:01 p1ratrulezzz

@p1ratrulezzz dare to run some brute-force script? I have 3 gateways, one had no password (some old fw), other 2 were on 1.5.5.006 with the password admin

osigida avatar Jan 12 '24 15:01 osigida

yep) I'll run the script and will use UART if no luck. for now i consider buying a new hub in case if i brick this one 😄

On Fri, Jan 12, 2024, 18:05 Oleg Sigida @.***> wrote:

@p1ratrulezzz https://github.com/p1ratrulezzz dare to run some brute-force script? I have 3 gateways, one had no password (some old fw), other 2 were on 1.5.5.006 with the password admin

— Reply to this email directly, view it on GitHub https://github.com/AlexxIT/XiaomiGateway3/issues/1223#issuecomment-1889455912, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABGJQFKDD7XTFN3A6XLKG5DYOFGMTAVCNFSM6AAAAAA74HS74SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOBZGQ2TKOJRGI . You are receiving this because you were mentioned.Message ID: @.***>

p1ratrulezzz avatar Jan 12 '24 15:01 p1ratrulezzz

Brute-force will last until the end of the universe. I've been checking

AlexxIT avatar Jan 12 '24 15:01 AlexxIT

yes, even if password is 6 random chars, it will last forever. So looks like uart is the jedi path

On Fri, Jan 12, 2024, 18:09 Alex X @.***> wrote:

Brute-force will last until the end of the universe. I've been checking

— Reply to this email directly, view it on GitHub https://github.com/AlexxIT/XiaomiGateway3/issues/1223#issuecomment-1889466924, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABGJQFJIUJN34P6BP6HXKE3YOFG2PAVCNFSM6AAAAAA74HS74SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOBZGQ3DMOJSGQ . You are receiving this because you were mentioned.Message ID: @.***>

p1ratrulezzz avatar Jan 12 '24 15:01 p1ratrulezzz

Maybe a dictionary then? I doubt it is random. I also found app as user name and no password on some forum as an option

osigida avatar Jan 12 '24 15:01 osigida

Maybe a dictionary then? I doubt it is random. I also found app as user name and no password on some forum as an option

app didn't work either. As for dictionary attack I'll try to use weakpass password list maybe, good idea even if will take a month )

p1ratrulezzz avatar Jan 12 '24 16:01 p1ratrulezzz

I think I just broke my gateway 3... I did that 5-2-2-2-2-2 in my 1.4.xxx and it's blinking orange and don't go out... Any advise? I tried since telnet was not working admin/app or whatever....

FilipeOS avatar Jan 15 '24 21:01 FilipeOS

I have mi gateway 3 with v 1.56_0001. Method 5-2-2-2-2-2 help me to open telnet port (23).

I was able to login admin/admin via telnet

alexpts avatar Jan 28 '24 21:01 alexpts

No other methods helped at all... I had to solder UART and found key in the boot logs so I was able to add it to home assistant using key + token (from mihome vevs app).

I think I just broke my gateway 3... I did that 5-2-2-2-2-2 in my 1.4.xxx and it's blinking orange and don't go out... Any advise? I tried since telnet was not working admin/app or whatever....

I believe UART is also variant to unbrick the device, but in your case it looks like you just need to try to press 10 times the button again and it will reset the device, then just reconnect it in mi home. Orange light normally means "in pairing mode" waiting for adding to mi home, probably you didn't wait enough in 5-2-2-2-2 method beause instead of each dash there should be a pause for 1-2 sec

p1ratrulezzz avatar Feb 11 '24 22:02 p1ratrulezzz

But in video there's no 1/2 seconds wait.. I think I'll wait for some other option for noobs to update it....

FilipeOS avatar Feb 11 '24 22:02 FilipeOS

no, definetely you should wait after each iterations

5 quick clicks, pause. 2 quick clicks, pause, 2 quick clicks, pause ... and so on until the led blinks once meaning that telnet enabled

On Mon, Feb 12, 2024, 01:24 FilipeOS @.***> wrote:

But in video there's no 1/2 seconds wait.. I think I'll wait for some other option for noobs to update it....

— Reply to this email directly, view it on GitHub https://github.com/AlexxIT/XiaomiGateway3/issues/1223#issuecomment-1937893815, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABGJQFJXIG5WNL5A3HCZPA3YTFALRAVCNFSM6AAAAAA74HS74SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMZXHA4TGOBRGU . You are receiving this because you were mentioned.Message ID: @.***>

p1ratrulezzz avatar Feb 11 '24 22:02 p1ratrulezzz

I can't make it work on 1.4.6_0043 - EU. I do the 5-2-2-2-2-2 and nothing happens. When I access via putty to ip, ask me the login and I tried admin, app, xiaomi, mi, etc with blank pw and can't never access.... any alternative please?

FilipeOS avatar Feb 14 '24 16:02 FilipeOS

This clicks works only on 1.5.5+ firmwares. But lower firmwares don't need clicks. Integration can remove telnet password on first connect.

AlexxIT avatar Feb 14 '24 17:02 AlexxIT

But whn I try to add gateway always say wrong telnet command, and I don't know password? Please advise

FilipeOS avatar Feb 14 '24 17:02 FilipeOS

You can try to download old HassWP versions with this old firmware support.

AlexxIT avatar Feb 14 '24 18:02 AlexxIT

I don't understand, why should I install a portable home assistant if I want only to update my gateway 3 to work with latest firmware available here? Sorry

FilipeOS avatar Feb 14 '24 18:02 FilipeOS

It's easiest way to remove telnet password. But you can search other instructions

AlexxIT avatar Feb 14 '24 18:02 AlexxIT