Gain SSH Access to your Bobcat Miner.
This "exploit" allows you to gain SSH Access to your Bobcat Miner. Something that is blocked from the factory.
To identify your Bobcat version, check the sticker on the bottom of the device. The serial number will start with 28/285/290 or 295
280 not available yet, simply because I don't have access to the original OS. Will add support when I come across one.
A minimal operating system is booted via SD Card.
Upon boot, a script (located at /sbin/init
) does the following.
- Mounts the EMMC.
- Backs up the original files listed below.
- Copies a modified
shadow
file (password authentication) to/etc
directory. - Copies a modified
sshd_config
file to/etc/ssh
. - Sets immutable permissions to the above files so an OTA Update (if one were to ever happen) does not remove the "hack".
- Using Balena etcher or dd, burn the correct image to SD card.
- Insert SD card into Bobcat. Power On.
- The script will run. On 29X, a blue light will start flashing when complete, On 285 it will not, just wait 90 seconds to be safe.
That's it. Remove the SD card, and boot original OS. The SSH Username is admin and Password is bobcat
Warning - While you should never expose port 22 of your Bobcat, it's now a good time to double check. In the past, Bobcat support has advised users to open port 22 on their firewalls for remote support. Now that the password is so easy/guessable, anybody could gain access to your bobcat in the future. Closing the port (if it's open) will only allow local access.
TLDR, don't open port 22, ever.
To fix your outdated miner to pull the latest miner firmware, modify the following file:
/etc/miner/miner_info.txt
Replace the contents with
VER="gateway-latest"
LSB="gateway-latest"
Reboot the gateway, then good to go.
The firmware from bobber.com is broken and users who flash it will be met with an unusable miner Run the following command via ssh to fix (Change region to yours) - then reboot
echo "MINER=false
GATEWAY_CONFIG=false
OTADAEMON=false
LORA_NA=US915" > /userdata/app.conf