| 00:24.24 | *** join/#qi-hardware atommann (~atommann@58.251.2.94) |
| 01:40.15 | *** join/#qi-hardware fengling (~fengling@111.198.29.53) |
| 02:06.25 | *** join/#qi-hardware xiangfu (~xiangfu@111.198.29.53) |
| 05:35.57 | *** join/#qi-hardware atommann (~atommann@58.251.2.94) |
| 06:30.35 | *** join/#qi-hardware xiangfu (~xiangfu@111.198.29.53) |
| 06:50.05 | *** join/#qi-hardware jekhor (~jek@nat-minsk-pool-46-53-200-107.telecom.by) |
| 07:35.55 | *** join/#qi-hardware wolfspraul (~wolfsprau@xd9bffac4.dyn.telefonica.de) |
| 08:08.28 | *** join/#qi-hardware pcercuei (~paul@137.71.226.54) |
| 09:16.14 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 09:32.15 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 10:07.41 | *** join/#qi-hardware pcercuei_ (~paul@137.71.226.54) |
| 10:55.43 | *** join/#qi-hardware GeorgeHahn (~GeorgeHah@c-69-141-92-254.hsd1.nj.comcast.net) |
| 11:08.12 | *** join/#qi-hardware paulburton (paulburton@gateway/shell/firrre/x-shjwbkltgranvjay) |
| 11:09.12 | *** join/#qi-hardware atommann (~atommann@58.251.2.94) |
| 11:19.25 | eintopf | the hitchbot is dead, maybe we can start a "hitchbotv2" an open hardware projekt and collect ideas like defense system, (maybe also shared storage system, AP(samba), usb mass storage), etc. |
| 11:19.36 | eintopf | but the hitchbotv2 needs of course a defense system |
| 11:52.41 | eintopf | or upload a picture to twitter if the hitchbot get touched at a place which hitchbot don't like it to be touched :/ |
| 11:53.11 | wpwrak | should be no problem in the US. guns and drones are well-liked there. it'll fit right in. |
| 11:54.31 | *** join/#qi-hardware jekhor (~jek@port-102-adslby-pool36.infonet.by) |
| 13:02.23 | *** join/#qi-hardware jekhor (~jek@port-102-adslby-pool36.infonet.by) |
| 13:27.31 | *** join/#qi-hardware arossdotme (~zxy@79-69-196-192.dynamic.dsl.as9105.com) |
| 13:50.25 | *** join/#qi-hardware FDCX (357@ceata/consiliu/FDCX) |
| 14:45.07 | *** join/#qi-hardware pcercuei (~paul@137.71.226.54) |
| 15:54.25 | *** join/#qi-hardware arossdotme (~zxy@79-69-204-12.dynamic.dsl.as9105.com) |
| 16:49.22 | DocScrutinizer05 | wtf hitchbot |
| 16:50.07 | DocScrutinizer05 | hi eintopf :-D |
| 16:54.47 | DocScrutinizer05 | ayayay https://www.youtube.com/watch?v=8_nTLIuk6Hk |
| 16:58.55 | eintopf | auweia |
| 17:04.49 | *** join/#qi-hardware jwhitmore (~jwhitmore@host213-122-245-73.range213-122.btcentralplus.com) |
| 17:36.32 | wpwrak | nice :) now they'll need a recovery team. i recommend these experts: http://avherald.com/h?article=489d53ad&opt=0 |
| 18:48.40 | *** join/#qi-hardware bzb (~bzb@198-48-208-237.cpe.pppoe.ca) |
| 19:05.01 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 19:47.29 | *** join/#qi-hardware jekhor (~jek@nat-minsk-pool-46-53-200-107.telecom.by) |
| 19:48.03 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 19:53.07 | *** join/#qi-hardware wildlander (~wild@unaffiliated/wildlander) |
| 20:07.34 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 20:17.06 | DocScrutinizer05 | ~dauthor Almesberger |
| 20:17.13 | DocScrutinizer05 | :-(( |
| 20:17.46 | DocScrutinizer05 | wtf? |
| 20:18.11 | DocScrutinizer05 | dauthor vs pstree -V |
| 20:23.16 | DocScrutinizer05 | psmisc has no authors listed in my pkg mgr tools |
| 20:28.06 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 20:36.28 | *** join/#qi-hardware jwhitmore (~jwhitmore@host213-122-245-73.range213-122.btcentralplus.com) |
| 20:54.20 | *** join/#qi-hardware pcf4l (6bd54a7b@gateway/web/freenode/ip.107.213.74.123) |
| 20:55.58 | eintopf | why does pstree no colorful output? |
| 20:56.02 | pcf4l | So I a serial breakout on a router, connected up an ftdi board and can receive output from the router, but can't send commands.. tried both cr and lf as eol characters but not sure what else to do. Any tips from veterans out there? |
| 20:56.06 | eintopf | :-) |
| 20:56.30 | eintopf | pcf4l: maybe you have read permissions only? ;-) |
| 20:57.36 | pcf4l | Console doesn't prompt for authentication, and I don't get any output when I attempt to send commands, it was my assumption that the bytes weren't making it down the wire.. but I suppose it could be a read only console from the get-go |
| 20:58.21 | eintopf | "Console doesn't prompt for authentication" -> check gettu |
| 20:58.23 | eintopf | getty |
| 20:58.26 | pcf4l | It's an off-the-shelf router (DIR-600L) that has custom firmware on it from a security company that came in my home security package... don't even know (and can't obtain) the creds for the web ui :( |
| 20:58.49 | eintopf | or agetty or xygetty. there are alot of getty implementations outside |
| 20:59.00 | eintopf | this will allow call login at your console |
| 20:59.18 | eintopf | but I don't know how it's working with systemd-logind |
| 21:02.03 | pcf4l | Also don't have shell access, no access of any kind actually. |
| 21:02.28 | pcf4l | It's *that* locked down. I paid for the thing and the bastages won't budge. |
| 21:02.38 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 21:02.40 | pcf4l | would love to just flash the official dlink firmware onto it and call it a day |
| 21:03.49 | whitequark | jtag |
| 21:03.50 | pcf4l | board also has a jtag breakout, never messed with jtag before though |
| 21:04.00 | pcf4l | ^_^ |
| 21:04.38 | eintopf | I assume your getty configuration simple doesn't allow to login from any console |
| 21:05.02 | eintopf | but what you could do it |
| 21:05.03 | eintopf | is |
| 21:05.11 | eintopf | change init=/bin/sh |
| 21:05.20 | eintopf | then manipulate the getty conf |
| 21:05.23 | pcf4l | For fun, here's the console output upon factory reset: http://pastebin.com/KgRyM5vP |
| 21:05.53 | eintopf | "console output" != "Console doesn't prompt for authentication" |
| 21:06.29 | eintopf | do you have access to change the kernel parameters? |
| 21:06.44 | pcf4l | I have literally zero access. No ssh, no telnet, no web ui, nothing. |
| 21:07.09 | pcf4l | so I figured I'd crack it open and see what the serial breakout could be used for |
| 21:07.56 | eintopf | no access to kernel parameters and no getty which allows you to login |
| 21:08.01 | eintopf | complicated :-/ |
| 21:08.26 | pcf4l | Seems that way. It's a trash router anyway, was more of a learning experience than anything. |
| 21:08.55 | eintopf | I think with jtag it should be possible to make something more with that |
| 21:09.31 | eintopf | or reflash the flash via some wires at flash ic |
| 21:09.38 | eintopf | if possible |
| 21:09.39 | eintopf | :D |
| 21:10.10 | eintopf | "Start telnetd ..." |
| 21:10.15 | eintopf | you have telnet access |
| 21:10.24 | eintopf | did you tried that? |
| 21:10.43 | pcf4l | I might give that a go at some point. Pin pitch on the jtag breakout is super small (I guess maybe like .5mm instead of 1mm) |
| 21:10.50 | pcf4l | Tried telnet, connection refused |
| 21:10.50 | eintopf | I would call nmap $IP |
| 21:10.59 | eintopf | maybe the port is changed |
| 21:11.02 | eintopf | not standard port |
| 21:11.08 | pcf4l | 80, 23, and 52869 are the only ports exposed on it |
| 21:11.08 | eintopf | try nmap |
| 21:11.19 | eintopf | and I think 23 is telnet |
| 21:11.20 | eintopf | :-) |
| 21:11.22 | pcf4l | tried telnetting on both 23 and 52869, no luck :( |
| 21:11.26 | eintopf | :( |
| 21:11.46 | eintopf | what's there? |
| 21:11.58 | eintopf | maybe try netcat and you will get some prompt |
| 21:12.03 | eintopf | ascii prompt |
| 21:12.47 | pcf4l | connection refused on both |
| 21:13.06 | pcf4l | I'm guessing the custom firmware loaded by the security company locks it down instead of just stopping the servers or something |
| 21:13.11 | pcf4l | I'll try netcat at some point, thanks |
| 21:13.16 | eintopf | http://www.cvedetails.com/version/85577/BOA-BOA-0.94.14rc21.html |
| 21:13.27 | eintopf | one hole with "execution code" |
| 21:13.32 | eintopf | sounds good :-) |
| 21:14.11 | pcf4l | Nice find, thanks! |
| 21:14.31 | eintopf | so then I would change something to get shell and root |
| 21:15.20 | *** join/#qi-hardware jwhitmore (~jwhitmore@host213-122-245-73.range213-122.btcentralplus.com) |
| 21:15.46 | eintopf | has no experience with hacking linux |
| 21:18.42 | pcf4l | This is my first attempt at any sort of hardware hacking at all |
| 21:19.49 | eintopf | oh really? I usually hack atm machines |
| 21:19.53 | eintopf | :-P |
| 21:20.07 | eintopf | no, they running windows xp |
| 21:24.00 | *** join/#qi-hardware pcf4l_ (6bd54a7b@gateway/web/freenode/ip.107.213.74.123) |
| 21:24.04 | pcf4l_ | Meh |
| 21:24.10 | pcf4l_ | 400 Bad Request Your client has issued a malformed or illegal request. |
| 21:24.19 | pcf4l_ | and serial console: " URI contains bogus characters" |
| 21:24.22 | pcf4l_ | must be patched :( |
| 21:26.09 | pcf4l_ | Thanks for the tips, eintopf, I'll keep tinkering. Cheers! |
| 21:30.13 | *** join/#qi-hardware wej (~j@2a00:1768:2001:7:1::3e) |
| 21:48.16 | *** join/#qi-hardware viric (~viric@unaffiliated/viric) |