Decode Telnet Password

Original author in community. Discuss here.

Works if you bought a Gateway with Telnet password from the factory.

Solder UART

Same step from this instruction.

Go to bootloader

Same step from this instruction.

Read factory

1. Enable flash

   <RealTek>snwbi

2. Read factory from nand to memory

   <RealTek>snwbrecc a0000000 180 1e0

3. Display factory in memory

   <RealTek>db a0000000 1e0

4. Paste result to this form

   Also paste gateway MAC-address (from router or Mi Home application).

5. Use password to enter Telnet and remove Telnet password:

   passwd -d admin (leave blank)