root@ls410d:~# tail -f /var/log/messages : : Nov 30 18:14:03 ls410d kernel: usb 1-1: new high-speed USB device number 2 using ehci_marvell Nov 30 18:14:03 ls410d kernel: scsi2 : usb-storage 1-1:1.0 Nov 30 18:14:04 ls410d kernel: scsi 2:0:0:0: Direct-Access ViPowER VP-89118(SD1) 2.10 PQ: 0 ANSI: 4 Nov 30 18:14:04 ls410d kernel: sd 2:0:0:0: [sdb] 78165360 512-byte logical blocks: (40.0 GB/37.2 GiB) Nov 30 18:14:04 ls410d kernel: sd 2:0:0:0: [sdb] Write Protect is off Nov 30 18:14:04 ls410d kernel: sd 0:0:0:0: Attached scsi generic sg0 type 0 Nov 30 18:14:04 ls410d kernel: sd 2:0:0:0: Attached scsi generic sg1 type 0 Nov 30 18:14:04 ls410d kernel: sdb: sdb1 sdb2 sdb3 sdb4 sdb5 sdb6 Nov 30 18:14:04 ls410d kernel: sd 2:0:0:0: [sdb] Attached SCSI disk ^C root@ls410d:~# mdadm --assemble -scan mdadm: /dev/md/LS-WSXLE75:21 has been started with 1 drive (out of 2). mdadm: /dev/md/LS-WSXL-EME75:10 has been started with 1 drive (out of 2). mdadm: /dev/md/LS-WSXL-EME75:1 has been started with 1 drive (out of 2). mdadm: failed to add /dev/sdb3 to /dev/md/1_0: Invalid argument mdadm: failed to RUN_ARRAY /dev/md/1_0: Invalid argument mdadm: /dev/md/0_0 has been started with 1 drive (out of 2). mdadm: failed to add /dev/sdb3 to /dev/md/1_0: Invalid argument mdadm: failed to RUN_ARRAY /dev/md/1_0: Invalid argument root@ls410d:~# ls -l /dev/md* brw-rw---T 1 root disk 9, 123 11月 30 18:14 /dev/md123 brw-rw---T 1 root disk 9, 124 11月 30 18:14 /dev/md124 brw-rw---T 1 root disk 9, 125 11月 30 18:14 /dev/md125 brw-rw---T 1 root disk 9, 126 11月 30 18:14 /dev/md126 brw-rw---T 1 root disk 9, 127 11月 30 18:14 /dev/md127 /dev/md: 合計 0 lrwxrwxrwx 1 root root 8 11月 30 18:14 0_0 -> ../md124 lrwxrwxrwx 1 root root 8 11月 30 18:14 LS-WSXL-EME75:1 -> ../md125 lrwxrwxrwx 1 root root 8 11月 30 18:14 LS-WSXL-EME75:10 -> ../md126 lrwxrwxrwx 1 root root 8 11月 30 18:14 LS-WSXLE75:21 -> ../md127 root@ls410d:~# mkdir /tmp/boot root@ls410d:~# mount /dev/md124 /tmp/boot root@ls410d:~# cd !$ cd /tmp/boot root@ls410d:/tmp/boot# ls builddate.txt initrd.buffalo log.tgz conf_save.md5sum initrd.buffalo.orig lost+found conf_save.tgz initrd.gz uImage.buffalo root@ls410d:/tmp/boot# rm initrd.buffalo root@ls410d:/tmp/boot# mv initrd.buffalo.orig !$ mv initrd.buffalo.orig initrd.buffalo root@ls410d:/tmp/boot# cd / root@ls410d:/# umount /tmp/boot root@ls410d:/#
yasunari@qube:~$ ssh -l root lswsxl The authenticity of host 'lswsxl (192.168.2.58)' can't be established. RSA key fingerprint is b5:dc:1f:67:1f:da:58:de:a7:50:2c:b9:1e:18:35:d4. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'lswsxl,192.168.2.58' (RSA) to the list of known hosts. root@LS-WSXLE75:~#
root@LS-WSXLE75:~# ls /boot root@LS-WSXLE75:~#あれ?
root@LS-WSXLE75:~# mount /dev/md0 /boot mount: mounting /dev/md0 on /boot failed: No such file or directory root@LS-WSXLE75:~#ふげ。
root@LS-WSXLE75:~# cat /proc/mdstat Personalities : [linear] [raid0] [raid1] [raid6] [raid5] [raid4] md21 : active raid1 sda6[0] 24248904 blocks super 1.2 [2/1] [U_] md1 : active raid1 sda2[0] 4999156 blocks super 1.2 [2/1] [U_] md10 : active raid1 sda5[0] 1000436 blocks super 1.2 [2/1] [U_] md124 : active raid1 sda1[0] 1000384 blocks [2/1] [U_] unused devices:LS410D につないだ時に mdadm --assemble -scan してしまったので、 変わってしまっている。root@LS-WSXLE75:~#
とりあえずこのまま進める
root@LS-WSXLE75:~# mount /dev/md124 /boot root@LS-WSXLE75:~# cd /boot root@LS-WSXLE75:/boot# ls builddate.txt conf_save.tgz initrd.gz lost+found/ conf_save.md5sum initrd.buffalo log.tgz uImage.buffalo root@LS-WSXLE75:/boot# dd if=initrd.buffalo of=initrd.gz bs=64 skip=1 150736+1 records in 150736+1 records out root@LS-WSXLE75:/boot# gunzip initrd.gz root@LS-WSXLE75:/boot# mkdir /tmp/root root@LS-WSXLE75:/boot# mount -o loop initrd /tmp/root root@LS-WSXLE75:/boot# cd /tmp/root root@LS-WSXLE75:/tmp/root# ls -l drwxr-xr-x 2 root root 2048 Nov 14 21:26 bin/ drwxr-xr-x 2 root root 1024 Nov 14 21:26 debugtool/ drwxr-xr-x 6 root root 5120 Nov 14 21:26 dev/ drwxr-xr-x 15 root root 1024 Nov 14 21:26 etc/ drwxr-xr-x 4 root root 2048 Nov 14 21:26 lib/ -rwxr-xr-x 1 root root 10397 Nov 6 14:21 linuxrc* drwx------ 2 root root 12288 Nov 14 21:26 lost+found/ drwxr-xr-x 4 root root 1024 Nov 14 21:26 mnt/ drwxr-xr-x 2 root root 1024 May 1 2009 proc/ drwxr-xr-x 3 root root 1024 Nov 14 21:26 root/ drwxr-xr-x 2 root root 1024 Nov 14 21:25 rootfs/ drwxr-xr-x 2 root root 2048 Nov 14 21:26 sbin/ drwxr-xr-x 2 root root 1024 Oct 20 2008 share/ drwxr-xr-x 2 root root 1024 Nov 14 21:25 sys/ drwxr-xr-x 2 root root 1024 Nov 14 21:25 tmp/ drwxr-xr-x 7 root root 1024 Nov 14 21:26 usr/ drwxr-xr-x 6 root root 1024 Nov 14 21:26 var/ drwxr-xr-x 3 root root 1024 Nov 14 21:26 www/ root@LS-WSXLE75:/tmp/root#
root@LS-WSXLE75:/tmp/root# find . -name sshd -print root@LS-WSXLE75:/tmp/root# find . -name telnetd -print root@LS-WSXLE75:/tmp/root#ない。
root@LS-WSXLE75:/tmp/root# bin/busybox | grep telnet syslogd, tail, tar, taskset, tcpsvd, tee, telnet, test, root@LS-WSXLE75:/tmp/root# bin/busybox | grep ssh root@LS-WSXLE75:/tmp/root#telnet コマンドはあるが、telnetd も sshd もない
inetd は?
root@LS-WSXLE75:/tmp/root# find . -name inetd -print ./usr/sbin/inetd root@LS-WSXLE75:/tmp/root# ls etc/inetd.conf etc/inetd.conf root@LS-WSXLE75:/tmp/root#inetd はある。
root@LS-WSXLE75:/tmp/root# grep inetd etc/init.d/* etc/init.d/shutdown_proc.sh:exec_sh inetd.sh root@LS-WSXLE75:/tmp/root#起動するようにはなっていない。
困った
|
← ハックキットのインストール |
ハックの記録 LinkStation/玄箱 をハックしよう |
→ RAM root に telnet |
Copyright (C) 2003-2013 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市