随身WiFi
参考：openstick项目
芯片主要有高通410，ASR，紫光展锐
高通410
- Mifi: 管理页面为
192.168.100.1，网页名为4G LTE WLan Router ，nmap扫描仅开放了3个端口，没有adb的端口，adb无法无线连接，也无ssh端口
$ nmap 192.168.100.1
Starting Nmap 7.94 ( https://nmap.org ) at 2024-03-25 20:44 йʱ
Nmap scan report for 192.168.100.1
Host is up (0.0052s latency).
Not shown: 997 closed tcp ports (reset)
PORT STATE SERVICE
53/tcp open domain
80/tcp open http
8000/tcp open http-alt
MAC Address: 5C:A0:00:C8:94:97 (Unknown)
Nmap done: 1 IP address (1 host up) scanned in 17.91 seconds
- 拆开后PCB上丝印层有
MF601SL_CT_V07，STM-5字样，这里给了v03,v05,v06改串去云控的焊接方式。
- 仅保留电路板，连接usb，长按开机键，reset键，我都按了，最后设备管理中
其他设备里出现Android表明成功识别 adb usb启动，adb shell进入adb命令行，发现为MSM8916芯片（高通410）, 400M内存，2.4G可用的存储。切卡密码为MIFI888888。远程adbd端口被悄咪咪的改成了0，即禁用.
shell@msm8916_32_512:/ $ getprop|grep product
[ro.build.product]: [msm8916_32_512]
[ro.product.board]: [msm8916]
[ro.product.brand]: [qcom]
[ro.product.cpu.abi2]: [armeabi]
[ro.product.cpu.abi]: [armeabi-v7a]
[ro.product.device]: [msm8916_32_512]
[ro.product.locale.language]: [en]
[ro.product.locale.region]: [US]
[ro.product.manufacturer]: [unknown]
[ro.product.model]: [msm8916_32_512]
[ro.product.name]: [msm8916_32_512]
shell@msm8916_32_512:/ $ cat /proc/meminfo
MemTotal: 402336 kB
shell@msm8916_32_512:/ $ df
Filesystem Size Used Free Blksize
/dev 196.5M 128.0K 196.3M 4096
/sys/fs/cgroup 196.5M 12.0K 196.4M 4096
/mnt/asec 196.5M 0.0K 196.5M 4096
/mnt/obb 196.5M 0.0K 196.5M 4096
/system 774.9M 329.9M 445.0M 4096
/data 2.4G 12.7M 2.4G 4096
/cache 122.0M 64.0K 121.9M 4096
/persist 27.5M 88.0K 27.4M 4096
/firmware 64.0M 44.5M 19.4M 16384
/mnt/shell/emulated 2.4G 12.7M 2.4G 4096
/mnt/shell/emulated/0 2.4G 12.7M 2.4G 4096
shell@msm8916_32_512:/ $ getprop|grep ufi
[persist.ufi.card.plug]: [yes]
[persist.ufi.ft.haveeth]: [0]
[persist.ufi.ft.only_sn]: [0]
[persist.ufi.ft.server]: [NONE]
[persist.ufi.ft.simsw]: [1]
[persist.ufi.ft.simsw_pw]: [1]
[persist.ufi.ft.simswitchpword]: [MIFI888888]
[persist.ufi.ft.weblogo]: [NORMAL]
[persist.ufi.ft.withmtp]: [0]
[persist.ufi.ft.write_imei]: [1]
[persist.ufi.name.imei.suffix]: [yes]
[persist.ufi.nosignal.reboot]: [no]
[persist.ufi.qhyl.light]: []
[persist.ufi.qhyl.switchsim]: []
[persist.ufi.signal.check]: [yes]
[persist.ufi.sim.pooling]: [no]
[persist.ufi.sim.prior]: [DE]
[persist.ufi.sn.auth.service]: [1]
[persist.ufi.test.light]: [yes]
[persist.ufi.wifi.light]: [yes]
shell@msm8916_32_512:/system $ getprop|grep adb
[init.svc.adbd]: [running]
[persist.adb.tcp.port]: [10242]
[persist.radio.adb_log_on]: [0]
[persist.sys.usb.config]: [diag,serial_smd,rmnet_bam,adb]
[ro.sys.usb.default.config]: [diag,serial_smd,rmnet_bam,adb]
[service.adb.tcp.port]: [0]
[sys.usb.config]: [rndis,serial_smd,adb]
[sys.usb.state]: [rndis,adb]
shell@msm8916_32_512:/ $ cat /sys/class/graphics/fb0/virtual_size
132,264
shell@msm8916_32_512:/ $ cat /sys/class/graphics/fb1/virtual_size
1280,1440
shell@msm8916_32_512:/ $ cat /sys/class/graphics/fb1/modes
U:1280x720p-14
# 帧缓冲设备fb0已经被修改成无法使用的状态
shell@msm8916_32_512:/ $ cat /sys/class/graphics/fb0/modes
U:132x132p-0
之后可以做的事情
- Android下
- 开启远程adb:
setprop service.adb.tcp.port 5555 - tmuxAdroid 通过tmux安装青龙，因为Android下安装docker需要重新编译Android开启一些功能。
- 截屏并保存至本地：
./adb shell screencap -p /sdcard/screen.png./adb pull /sdcard/screen.png - 输入按键：如tab,enter
./adb shell input keyevent KEYCODE_ENTER - ARDC安装: 安卓系统为4.4.4,非常旧，因此选用年代久远的ARDC（找不到官网）;scrcpy 不能在android 5以下工作
- 当前launcher:
dumpsys window windows|grep mCurrentFocus - 更换launcher:
adb shell pm disable-user 当前的launcher
- 当前launcher:
scrcpy: 使用截屏进行投屏操作- Linux Deploy: 提供bash环境，有类似参考
- 关闭热点，切换为wifi
- 配置修改
- 开启远程adb:
- 刷入Armbian