brick:~# mkdir /tmp/root brick:~# mount /dev/sdb2 /tmp/root brick:~# cd /tmp/root/etc/ brick:/tmp/root/etc# ls _printcap hosts melco rc.d apache hosts.deny mke2fs.conf resolv.conf apcupsd hotplug.d modules.conf rootfs_ok apt inetd.conf moduli rpc atalk init.d mt-daapd.conf rsyncd.conf bonjour.config initial_settings mtab rsyncd.secret buffalo-web.conf initrd_ver nas_feature samba cron inittab nsswitch.conf security daemonwatch.list issue ntp.conf services debian_version issue.net openldap services.conf default ld.so.cache pam.d shadow dhcpc ld.so.conf pam_smb.conf shells dhcpcd limits passwd skel environment linkstation_release printcap ssh_config fstab locale.alias printcap.sample sshd_config ftpusers localtime profile sysctl.conf group login.access profile.d syslog.conf gshadow login.defs proftpd yp.conf hddrootmode logrotate.d protocols host.conf lpd pwrmgr brick:/tmp/root/etc# cat linkstation_release VERSION=1.10 SUBVERSION=HDD 0.73 PRODUCTID=0x00000000 BUILDDATE=2009/05/07 13:36:27 brick:/tmp/root/etc#1.10。
brick:/tmp/root/etc# ls -l ../usr/sbin/telnetd lrwxrwxrwx 1 root root 17 Sep 2 12:33 ../usr/sbin/telnetd -> ../../bin/busybox brick:/tmp/root/etc#ある。
brick:/tmp/root/etc# cd init.d/ brick:/tmp/root/etc/init.d# tail rcS exec_sh bootcomplete.sh echo "** step final(after bootcomplete) **" for cmd in hdd_late_check.sh check_initialization.sh usb_late_check.sh do exec_sh ${cmd} done /usr/local/bin/share_delete.sh & brick:/tmp/root/etc/init.d# echo >> rcS brick:/tmp/root/etc/init.d# echo /usr/sbin/telnetd >> rcS brick:/tmp/root/etc/init.d# !tail tail rcS echo "** step final(after bootcomplete) **" for cmd in hdd_late_check.sh check_initialization.sh usb_late_check.sh do exec_sh ${cmd} done /usr/local/bin/share_delete.sh & /usr/sbin/telnetd brick:/tmp/root/etc/init.d#
brick:/tmp/root/etc/init.d# cd .. brick:/tmp/root/etc# vi shadow : : brick:/tmp/root/etc# head shadow root::11009:0:99999:7::: bin:*:11009:0:99999:7::: daemon:*:11009:0:99999:7::: halt:*:11009:0:99999:7::: ftp:*:11009:0:99999:7::: rpc:*:11009:0:99999:7::: rpcuser:*:11009:0:99999:7::: apache:*:11009:0:99999:7::: admin:$1$$I2o9Z7NcvQAKp7wyCTlia0:11009:0:99999:7::: sshd:!:13241:0:99999:7::: brick:/tmp/root/etc#
brick:/tmp/root/etc# cd / brick:/# umount /tmp/root brick:/#
sil:~# tail /var/log/daemon.log Sep 15 08:40:00 sil dhcpd: DHCPREQUEST for 192.168.11.3 from 00:24:a5:00:f9:eb via eth0: ignored (not authoritative). Sep 15 08:40:00 sil dhcpd: DHCPDISCOVER from 00:24:a5:00:f9:eb via eth0 Sep 15 08:40:01 sil dhcpd: DHCPOFFER on 192.168.2.205 to 00:24:a5:00:f9:eb (LS-CHL9EB) via eth0 Sep 15 08:40:01 sil dhcpd: Wrote 0 deleted host decls to leases file. Sep 15 08:40:01 sil dhcpd: Wrote 0 new dynamic host decls to leases file. Sep 15 08:40:01 sil dhcpd: Wrote 6 leases to leases file. Sep 15 08:40:01 sil dhcpd: DHCPREQUEST for 192.168.2.205 (192.168.2.39) from 00:24:a5:00:f9:eb (LS-CHL9EB) via eth0 Sep 15 08:40:01 sil dhcpd: DHCPACK on 192.168.2.205 to 00:24:a5:00:f9:eb (LS-CHL9EB) via eth0 sil:~#192.168.2.205 が振られたようだ。
sil:~# telnet 192.168.2.205 Trying 192.168.2.205... Connected to 192.168.2.205. Escape character is '^]'. BUFFALO INC. LinkStation series LS-CHL9EB login: root No mail. root@LS-CHL9EB:~#done!
|
← パーティション / Partitions |
ハックの記録 LinkStation/玄箱 をハックしよう |
→ Software Design 誌で「第3世代LinkStationをハックしよう」を連載 |