Jul 28 10:24:37 qube kernel: usb 2-1: new high speed USB device using ehci_marvell and address 2 Jul 28 10:24:37 qube kernel: usb 2-1: configuration #1 chosen from 1 choice Jul 28 10:24:37 qube kernel: scsi2 : SCSI emulation for USB Mass Storage devices Jul 28 10:24:42 qube kernel: scsi 2:0:0:0: Direct-Access ViPowER VP-89118(SD1) 2.10 PQ: 0 ANSI: 4 Jul 28 10:24:42 qube kernel: sd 2:0:0:0: [sdd] 1953525168 512-byte hardware sectors (1000205 MB) Jul 28 10:24:42 qube kernel: sd 2:0:0:0: [sdd] Write Protect is off Jul 28 10:24:42 qube kernel: sd 2:0:0:0: [sdd] 1953525168 512-byte hardware sectors (1000205 MB) Jul 28 10:24:42 qube kernel: sd 2:0:0:0: [sdd] Write Protect is off Jul 28 10:24:42 qube kernel: sdd: sdd1 sdd2 sdd3 sdd4 sdd5 sdd6 Jul 28 10:24:42 qube kernel: sd 2:0:0:0: [sdd] Attached SCSI disk Jul 28 10:24:42 qube kernel: sd 2:0:0:0: Attached scsi generic sg3 type 0パーティションは6つ
root@qube:~# parted -s /dev/sdd print Warning: Could not determine physical sector size for /dev/sdd. Using the logical sector size (512). Model: ViPowER VP-89118(SD1) (scsi) Disk /dev/sdd: 1000GB Sector size (logical/physical): 512B/512B Partition Table: gpt Number Start End Size File system Name Flags 1 17.4kB 1024MB 1024MB ext3 primary 2 1024MB 6144MB 5119MB ext3 primary 3 6144MB 6144MB 394kB primary bios_grub 4 6144MB 6144MB 512B primary 5 6144MB 7168MB 1024MB linux-swap(v1) primary 6 7168MB 992GB 985GB xfs primary root@qube:~#第3パーティションの bios_grub って何?
root@qube:~# mkdir /tmp/boot root@qube:~# mount /dev/sdd1 /tmp/boot root@qube:~# ls -l /tmp/boot total 211092 -rw-r--r-- 1 root root 200399162 Jul 19 15:36 hddrootfs.buffalo.updated.done -rw-r--r-- 1 root root 11886884 Jul 19 15:35 initrd.buffalo drwx------ 2 root root 16384 Jul 19 15:34 lost+found -rw-r--r-- 1 root root 725924 Jul 4 19:56 u-boot.buffalo -rw-r--r-- 1 root root 2894416 Jul 19 15:35 uImage.buffalo root@qube:~# umount /tmp/boot root@qube:~#従来と同じに見えるが、、、、節穴?
root@qube:~# mkdir /tmp/root root@qube:~# mount /dev/sdd2 /tmp/root root@qube:~# ls -l /tmp/root total 108 -rw------- 1 root root 408 Jul 19 06:50 * drwxr-xr-x 2 root root 4096 Jul 5 00:43 bin drwxr-xr-x 2 root root 4096 Jul 19 15:39 boot -rwxr-xr-x 1 root root 1140 May 14 05:50 chroot.sh drwxr-xr-x 2 root root 4096 Jul 5 00:43 debugtool drwxr-xr-x 5 root root 4096 Jul 5 00:43 dev drwxr-xr-x 36 guest guest 4096 Jul 19 06:50 etc drwxrwxrwx 4 root root 4096 Jul 5 00:43 home drwxr-xr-x 9 root root 4096 Jul 5 00:43 lib drwx------ 2 root root 16384 Jul 19 15:37 lost+found drwxr-xr-x 10 root root 4096 Jul 5 00:38 media drwxrwxrwx 8 root root 4096 Jul 19 06:42 mnt -rw-r--r-- 1 root root 0 Jul 19 06:43 offlinefile drwxr-xr-x 2 root root 4096 Jul 4 22:19 opt -rwxr-xr-x 1 root root 2741 May 14 05:50 prepare.sh drwxr-xr-x 2 root root 4096 Jul 4 22:19 proc drwxr-xr-x 3 root root 4096 Jul 5 00:43 root drwxr-xr-x 3 root root 4096 Jul 5 00:38 run drwxr-xr-x 2 root root 4096 Jul 19 15:42 sbin -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo.buffalocloud -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo.hidden -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo.vfs -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo.webaxs -rw-r--r-- 1 root root 0 Jul 19 06:43 shareinfo.webaxs.USBDISK drwxr-xr-x 2 root root 4096 Jul 4 22:19 sys -rwxr-xr-x 1 root root 3751 May 14 05:50 test.sh drwxrwxrwt 4 root root 4096 Jul 19 15:38 tmp drwxr-xr-x 12 root root 4096 Jul 5 00:42 usr drwxr-xr-x 10 root root 4096 Jul 19 15:42 var drwxrwxrwx 6 root root 4096 Jul 4 23:05 www root@qube:~#面白い!!
root@qube:~# cd /tmp/root root@qube:/tmp/root# file '*' *: ASCII text root@qube:/tmp/root# cat '*' Jul 19 06:41:09 LS410D06E daemon.emerg clientUtil_server[2443]: ap_serv_exit() exit ap_servd. code=15 Jul 19 06:41:09 LS410D06E daemon.emerg clientUtil_server[2438]: ap_serv_exit() exit ap_servd. code=15 Jul 19 06:50:50 LS410D06E daemon.emerg clientUtil_server[2333]: ap_serv_exit() exit ap_servd. code=15 Jul 19 06:50:50 LS410D06E daemon.emerg clientUtil_server[2327]: ap_serv_exit() exit ap_servd. code=15 root@qube:/tmp/root#中身はゴミ
Jul 19 06:39:24 LS410D06E user.notice kernel: klogd started: BusyBox v1.19.4 (2013-07-04 21:49:51 JST)syslog は BusyBox
Jul 19 06:39:24 LS410D06E user.notice kernel: Linux version 3.3.4 (root@debian) (gcc version 4.6.2 (Linaro GCC branch-4.6.2. Marvell GCC 201201-883.01c949de) ) #1 Thu Jul 4 22:16:52 JST 2013カーネルは 3.3.4
Jul 19 06:39:24 LS410D06E user.warn kernel: CPU: Marvell PJ4Bv7 Processor [561f5811] revision 1 (ARMv7), cr=10c53c7d Jul 19 06:39:24 LS410D06E user.warn kernel: CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache Jul 19 06:39:24 LS410D06E user.warn kernel: Machine: Marvell Armada-370CPU は Marvell Armada-370 ARMv7
Jul 19 06:39:24 LS410D06E user.info kernel: Memory: 512MB = 512MB total Jul 19 06:39:24 LS410D06E user.notice kernel: Memory: 498136k/498136k available, 26152k reserved, 0K highmemメモリは、512MB
Jul 19 06:39:24 LS410D06E user.info kernel: Calibrating delay loop... 1196.85 BogoMIPS (lpj=5984256)クロックは、1.2GHz(?)
Jul 19 06:39:24 LS410D06E user.warn kernel: Marvell Armada370 Board-- YANAGI Soc: MV6710 A1 LE Jul 19 06:39:24 LS410D06E user.warn kernel: LSP version: Armada370_LSP_3.1.0_p15_NQここにも YANAGI。人名?
Jul 19 06:39:24 LS410D06E user.info kernel: Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled Jul 19 06:39:24 LS410D06E user.info kernel: serial8250.0: ttyS0 at MMIO 0xd0012000 (irq = 41) is a 16550A Jul 19 06:39:24 LS410D06E user.info kernel: console [ttyS0] enabled : : Jul 19 06:40:21 LS410D06E daemon.info init: starting pid 2641, tty '': '/sbin/agetty -L ttyS0 115200 vt100'シリアルコンソールも使えそう
Jul 19 06:39:48 LS410D06E auth.info sshd[1682]: Server listening on 0.0.0.0 port 22.ssh も動いていそう。
しっかし、、、徹夜しての 6:40 なんだろうな。おつかれさまです
root@qube:/tmp/root# cat etc/linkstation_release VERSION=1.11 SUBVERSION=HDD 0.68 PRODUCTID=0x00000000 BUILDDATE=2013/07/05 00:43:22 root@qube:/tmp/root#
root@qube:/tmp/root# bin/busybox Illegal instruction root@qube:/tmp/root# file !$ file bin/busybox bin/busybox: setuid ELF 32-bit LSB executable, ARM, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.16, stripped root@qube:/tmp/root#ARMv7 のバイナリだから??
root@qube:/tmp/root# strings bin/busybox |less : :ar がなひ、、、
root@qube:/tmp/root# ls usr/bin/ar usr/bin/ar root@qube:/tmp/root#ある。
root@qube:/tmp/root# ls -l usr/bin/ar lrwxrwxrwx 1 root root 17 Jul 4 22:55 usr/bin/ar -> ../../bin/busybox root@qube:/tmp/root#さっき見たときは、BusyBox にはなかったのに、、、あぁ、2文字だからか。
root@qube:/tmp/root# ls -l usr/bin/wget -rwxr-xr-x 1 root root 328016 Jul 5 00:42 usr/bin/wget root@qube:/tmp/root#wget もある
こんなトコロか、、、
ざっと見た限りでは、従来機種と大きな違いはない
|
← 基板 |
ハックの記録 LinkStation/玄箱 をハックしよう |
→ ssh でログイン可能にする |
Copyright (C) 2003-2013 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市