Krast krast

升级小米路由器3 SSH + Shadowsocks

起因
升级到开发版
破解ssh登录
前提，下面描述的方法针对的条件如下：

##ss-redir 的 iptables 配置(透明代理)

透明代理指对客户端透明，客户端不需要进行任何设置就使用了网管设置的代理规则

创建 /etc/ss-redir.json 本地监听 7777 运行ss-redir -v -c /etc/ss-redir.json

iptables -t nat -N SHADOWSOCKS
# 在 nat 表中创建新链
iptables -t nat -A SHADOWSOCKS -p tcp --dport 23596 -j RETURN
# 23596 是 ss 代理服务器的端口，即远程 shadowsocks 服务器提供服务的端口，如果你有多个 ip 可用,但端口一致，就设置这个

如何在路由器中实现透明代理？

0 互联网现状

目前整个互联网环境，被破坏最严重地部分，是 Web 服务体验。当直接破坏难以实现时，就会从流程链的上下游着手，如：DNS 污染。

其它地互联网服务类型，例如：邮件，可能小部分会受到 Web 服务上下游破坏地余震，但整体上基本不受影响。

配置 shadowsocks

架设好 shadowsocks 服务端，在路由器上安装 shadowsocks 客户端，并配置 /etc/config/shadowsocks.json ，假设本地监听端口为 1080 。启动 shadowsocks

/etc/init.d/shadowsocks start

配置 privoxy

安装 privoxy openwrt 版。

	# This script create a Centos Minimal Unattended ISO

	# This method is based on excellent article http://pyxlmap.net/technology/software/linux/custom-centos-iso
	#
	# This script has be tested with CentOS 7.2 (on the orign server) to install CentOS 7.2 (on the target server)
	# TODO:
	# * test package update to reduce the update task on the target system. The following command downloads all updates :
	# (cd $CENTOS_CUSTOM_PATH/Packages ; yumdownloader $(for i in ; { echo ${i%%-[0-9]}; } ) )

	# Some global settings :

	frontend http
	bind 10.0.0.1:80
	mode http

	# Add a new header with the environment variable and the path concatenated
	http-request set-header X-ROUTING %[env(SERVER_AUTH)]::%[path]
	# Then compare the value using a regular expression with back-references
	# We need to use a named capture because of "reasons". Backreferences to normal captures seem to be rejected by HAProxy
	use_backend app if { req.hdr(X-ROUTING) -m reg ^(?<auth>.+)==\1 }
	# Cleanup in case we hadn't matched yet

	#!/bin/bash

	# How to use

	# 1. Replace the "YOURIP" to yourIP
	#sed -i -e 's/YOURIP/192.168.x.x/g' setup-taiga-centos.sh

	# 2. Run at the root
	#source setup-taiga-centos.sh

	// ==UserScript==
	// @name Download YouTube Videos as MP4
	// @description Adds a button that lets you download YouTube videos.
	// @homepageURL https://github.com/gantt/downloadyoutube
	// @author Gantt
	// @version 1.8.10
	// @date 2017-02-13
	// @namespace http://googlesystem.blogspot.com
	// @include http://www.youtube.com/*
	// @include https://www.youtube.com/*

	#!/usr/bin/sudo sh

	## ruby_revealer.sh -- decrypt obfuscated GHE .rb files. 2.0.0 to 2.3.1+.

	## From `strings ruby_concealer.so`:
	##
	## > This obfuscation is intended to discourage GitHub Enterprise customers
	## > from making modifications to the VM.
	##
	## Well, good, as long as its not intended to discourage me from doing this!

	// Use Gists to store code you would like to remember later on
	console.log(window); // log the "window" object to the console