RAM root を見る

LS-QVL

最近のファームウェアは、 busybox から telnetd が削除されているので、 準備(LS-QL の場合)の手順では ハックキットがインストールできないらしい。

確認する。

標準ファームにrootでログイン

yasunari@qube:~$ ssh -l root qvl
root@LS-QVLF42:~#

initrd.buffalo の展開

root@LS-QVLF42:~# cd /boot
root@LS-QVLF42:/boot# ls
builddate.txt initrd.buffalo lost+found/ uImage.buffalo
conf_save.tgz log.tgz u-boot_lsqvl.bin
root@LS-QVLF42:/boot# dd if=initrd.buffalo of=initrd.gz bs=64 skip=1
150232+1 records in
150232+1 records out
root@LS-QVLF42:/boot# gunzip initrd.gz
root@LS-QVLF42:/boot# mkdir /tmp/root
root@LS-QVLF42:/boot# mount -o loop initrd /tmp/root
root@LS-QVLF42:/boot#

RAM root の散歩

root@LS-QVLF42:/boot# cd /tmp/root
root@LS-QVLF42:/tmp/root# ls
bin/ etc/ lost+found/ root/ share/ usr/
debugtool/ lib/ mnt/ rootfs/ sys/ var/
dev/ linuxrc* proc/ sbin/ tmp/ www/
root@LS-QVLF42:/tmp/root/bin# ./busybox
BusyBox v1.7.0 (2009年04月29日 19:12:57 JST) multi-call binary
Copyright (C) 1998-2006 妥rik Andersen, Rob Landley, and others.
Licensed under GPLv2. 帯ee source distribution for full notice.
Usage: busybox [function] [arguments]...
 or: [function] [arguments]...
 BusyBox is a multi-call binary that combines many common Unix
 utilities into a single executable. Most people will create a
 link to busybox for each function they wish to use and BusyBox
 will act like whatever it was invoked as!
Currently defined functions:
 [, [[, addgroup, adduser, adjtimex, ar, arp, arping, ash,
 awk, basename, bunzip2, bzcat, cal, cat, catv, chattr,
 chgrp, chmod, chown, chpasswd, chpst, chroot, chrt, chvt,
 cksum, clear, cmp, comm, cp, cpio, crond, crontab, cryptpw,
 cut, date, dc, dd, deallocvt, delgroup, deluser, df, dhcprelay,
 diff, dirname, dmesg, dnsd, dos2unix, du, dumpkmap, dumpleases,
 echo, ed, egrep, eject, env, envdir, envuidgid, ether-wake,
 expand, expr, fakeidentd, false, fbset, fdflush, fdformat,
 fdisk, fgrep, find, fold, free, freeramdisk, fsck, fsck.minix,
 ftpget, ftpput, fuser, getopt, getty, grep, gunzip, gzip,
 halt, hdparm, head, hexdump, hostid, hostname, httpd,
 hwclock, id, ifconfig, ifdown, ifup, inetd, init, insmod,
 install, ip, ipaddr, ipcalc, ipcrm, ipcs, iplink, iproute,
 iprule, iptunnel, kill, killall, killall5, klogd, last,
 length, less, linux32, linux64, linuxrc, ln, loadfont,
 loadkmap, logger, login, logname, logread, losetup, ls,
 lsattr, lsmod, lzmacat, makedevs, md5sum, mdev, mesg,
 mkdir, mkfifo, mkfs.minix, mknod, mkswap, mktemp, modprobe,
 more, mount, mountpoint, mt, mv, nameif, nc, netstat,
 nice, nmeter, nohup, nslookup, od, openvt, passwd, patch,
 pidof, ping, ping6, pipe_progress, pivot_root, poweroff,
 printenv, printf, ps, pscan, pwd, raidautorun, rdate,
 readahead, readlink, readprofile, realpath, reboot, renice,
 reset, resize, rm, rmdir, rmmod, route, rpm, rpm2cpio,
 run-parts, runlevel, runsv, runsvdir, rx, sed, seq, setarch,
 setconsole, setkeycodes, setlogcons, setsid, setuidgid,
 sh, sha1sum, slattach, sleep, softlimit, sort, split,
 start-stop-daemon, stat, strings, stty, su, sulogin, sum,
 sv, svlogd, swapoff, swapon, switch_root, sync, sysctl,
 syslogd, tail, tar, taskset, tcpsvd, tee, telnet, test,
 tftp, time, top, touch, tr, traceroute, true, tty, ttysize,
 udhcpc, udhcpd, udpsvd, umount, uname, uncompress, unexpand,
 uniq, unix2dos, unlzma, unzip, uptime, usleep, uudecode,
 uuencode, vconfig, vi, vlock, watch, watchdog, wc, wget,
 which, who, whoami, xargs, yes, zcat, zcip
root@LS-QVLF42:/tmp/root/bin#
telnet はあるけど、telnetd はない。

さて、、

後始末

root@LS-QVLF42:/tmp/root# cd /
root@LS-QVLF42:/# umount /tmp/root
root@LS-QVLF42:/# cd /boot
root@LS-QVLF42:/boot# ls
builddate.txt initrd log.tgz u-boot_lsqvl.bin
conf_save.tgz initrd.buffalo lost+found/ uImage.buffalo
root@LS-QVLF42:/boot# rm initrd
root@LS-QVLF42:/boot#




ファームウェア 1.57 の散歩
ハックの記録
LinkStation/玄箱 をハックしよう
実験用 HDD の作成

ツイート Tweet to @yasunari_y @yasunari_yをフォロー

Copyright (C) 2003-2012 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市

AltStyle によって変換されたページ (->オリジナル) /