С дебагом туполинков не работал, поэтому тебе придется

С дебагом туполинков не работал, поэтому тебе придется гуглить, как заставить роутер схавать прошивки или по TFTP или по UART. Что-то, что я делал имело uBOOT и позволяло грузить прошивку удаленно по TFTP.

По командам дебага нашел вот это: piotrbania.com/all/articles/tplink_patch/

Цитата:

This is what I have received:

Bootbase Version: VTC1.15 | 2007/11/12 17:18:52
RAM: Size = 8192 Kbytes
DRAM POST: Testing: 8192K
OK
FLASH: AMD 16M *1

RAS Version: 1.0.2 Build 080522 Rel.37708
System ID: *2.11.36.0(RE9.C29)3.10.2.60| 2008/04/24

Press any key to enter debug mode within 3 seconds.
.....................................
Enter Debug Mode

After some additional digging I have found that you can use 'ATHE' command to list all available commands (this is not really deeply documented anywhere):

======= Debug Command Listing =======
AT just answer OK
ATHE print help


ATBAx change baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k
ATENx,(y) set BootExtension Debug Flag (y=password)
ATSE show the seed of password generator
ATTI(h,m,s) change system time to hour:min:sec or show current time
ATDA(y,m,d) change system date to year/month/day or show current date
ATDS dump RAS stack
ATDT dump Boot Module Common Area
ATDUx,y dump memory contents from address x for length y
ATRBx display the 8-bit value of address x
ATRWx display the 16-bit value of address x
ATRLx display the 32-bit value of address x
ATGO(x) run program at addr x or boot router
ATGR boot router
ATGT run Hardware Test Program
ATRTw,x,y(,z) RAM test level w, from address x to y (z iterations)
ATSH dump manufacturer related data in ROM
ATDOx,y download from address x for length y to PC via XMODEM
ATTD download router configuration to PC via XMODEM
ATUR upload router firmware to flash ROM

< press any key to continue >
ATLC upload router configuration file to flash ROM
ATXSx xmodem select: x=0: CRC mode(default); x=1: checksum mode
ATLD Upload Configuration File and Default ROM File to Flash
ATCD Convert Running ROM File to Default ROM File into Flash