Outils pour utilisateurs
livebox_thomson
Table des matières
Livebox Mini de chez Thomson
Il s'agit la de la LiveBox Mini de chez Thomson.
Il est possible d'après les caractéristiques de flasher la Livebox avec un Firmaware alternatif tel OpenWRT.
Il est enfin tombé sur votre site de reverse MD5 favoris
mot de passe root : 7KY175s7
Bootlog Full
sous BusyBox 1.01
Les commandes
/mnt/jffs2/jffs2_3/rescue/root # \[ get_param reset.sh addgroup getty reset_button.sh adduser grep reset_hard adsl_phy.bin halt reset_hard.sh adsl_phy_test.bin head resolvd adslctl hexdump rm arping hostname rmdir ash id rmmod atmctl ifconfig route basename init routef blueflash insmod routel bootmode install rtmon brctl ip rttune btnpoll iptables sed busybox iptplugd sh cat kill sleep checkd killall smtpclient chgrp klogd sort chmod lanled_ctrl start-stop-daemon chown led_ctrl starttelnet chroot ledctrl starttelnet.sh cmp ln su conf_get_nstr logger swapoff conf_get_str login swapon conf_set_str ls sync confbox lsmod syslogd cp maligneserv tail cut maligneserv_tv tc daemonize maligneserv_visio tee date mbusclient telnet dd md5sum telnetd delgroup mini_httpd test deluser mkdir tftp df mknod top dhcspd modprobe touch dirname monitor_wifi_rssi.sh tppp dmesg more tr dslpppled_booting mount true dslupd mv tty dt netstat uma_dns du nlplugd umount ebtables nslookup uname echo ntpclient uniq egrep p upgrade env passwd upnpd eraseall pidof uptime ethctl ping usleep expr pivot_root vi false poweroff wanadoo_kit fcp printf wc fgrep ps wget find pwd whoami free readrip xargs ftpget reboot yes ftpput remote_update gatewayd reset
Dump divers
/mnt/ramdisk/rd1 # cat /proc/version Linux version 2.6.12.6 (buildmgm@dslws-narenr) (gcc version 3.4.2) #1 Mon Jun 8 20:02:05 CST 2009 /mnt/ramdisk/rd1 # cat /proc/meminfo MemTotal: 58712 kB MemFree: 7832 kB Buffers: 5796 kB Cached: 21752 kB SwapCached: 0 kB Active: 20344 kB Inactive: 14964 kB HighTotal: 0 kB HighFree: 0 kB LowTotal: 58712 kB LowFree: 7832 kB SwapTotal: 0 kB SwapFree: 0 kB Dirty: 0 kB Writeback: 0 kB Mapped: 15084 kB Slab: 10040 kB CommitLimit: 29356 kB Committed_AS: 12344 kB PageTables: 744 kB VmallocTotal: 1048560 kB VmallocUsed: 3660 kB VmallocChunk: 1043476 kB /mnt/ramdisk/rd1 # cat /proc/cpuinfo system type : Inventel BlueDSL 8G processor : 0 cpu model : BCM6358 V1.0 BogoMIPS : 299.00 wait instruction : no microsecond timers : yes tlb_entries : 32 unaligned_instructions : 738 extra interrupt vector : no hardware watchpoint : no ASEs implemented : mips16 VCED exceptions : not available VCEI exceptions : not available /mnt/ramdisk/rd1 # cat /proc/partitions major minor #blocks name 31 0 7956 mtdblock0 31 1 1024 mtdblock1 31 2 6144 mtdblock2 31 3 16384 mtdblock3 /mnt/ramdisk/rd1 # cat /proc/pci PCI devices found: Bus 0, device 1, function 0: Ethernet controller: PCI device 168c:001a (Atheros Communications, Inc.) (rev 1). IRQ 39. Master Capable. Latency=168. Min Gnt=10.Max Lat=28. Non-prefetchable 32 bit memory at 0x10000000 [0x1000ffff]. Bus 0, device 9, function 0: USB Controller: PCI device 14e4:6300 (Broadcom Corporation) (rev 1). IRQ 13. Master Capable. No bursts. Min Gnt=255.Max Lat=255. Non-prefetchable 32 bit memory at 0xfffe1400 [0xfffe14ff]. Bus 0, device 10, function 0: USB Controller: PCI device 14e4:6300 (Broadcom Corporation) (rev 1). IRQ 18. Master Capable. No bursts. Min Gnt=255.Max Lat=255. Non-prefetchable 32 bit memory at 0xfffe1300 [0xfffe13ff]. /mnt/ramdisk/rd1 # /mnt/ramdisk/rd1 # free total used free shared buffers Mem: 58712 50844 7868 0 5796 Swap: 0 0 0 Total: 58712 50844 7868 /mnt/jffs2/jffs2_3/system/root # ll /dev/mtd* crw-rw-rw- 1 root root 90, 0 Jan 1 1970 /dev/mtd0 cr--r--r-- 1 root root 90, 1 Jan 1 1970 /dev/mtd0ro crw-rw-rw- 1 root root 90, 2 Jan 1 1970 /dev/mtd1 cr--r--r-- 1 root root 90, 3 Jan 1 1970 /dev/mtd1ro crw-rw-rw- 1 root root 90, 4 Jan 1 1970 /dev/mtd2 cr--r--r-- 1 root root 90, 5 Jan 1 1970 /dev/mtd2ro crw-rw-rw- 1 root root 90, 6 Jan 1 1970 /dev/mtd3 cr--r--r-- 1 root root 90, 7 Jan 1 1970 /dev/mtd3ro brw------- 1 root root 31, 0 Jan 1 1970 /dev/mtdblock0 brw------- 1 root root 31, 1 Jan 1 1970 /dev/mtdblock1 brw------- 1 root root 31, 2 Jan 1 1970 /dev/mtdblock2 brw------- 1 root root 31, 3 Jan 1 1970 /dev/mtdblock3 /mnt/jffs2/jffs2_3/rescue/root # cat /proc/mtd dev: size erasesize name mtd0: 00390000 00020000 "rootfs" mtd1: 00100000 00020000 "user" mtd2: 00a60000 00020000 "system" mtd3: 01000000 00020000 "lb_flash" /mnt/ramdisk/rd1 # cat /proc/diskstats 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 1 3 ram3 0 0 0 0 0 0 0 0 0 0 0 1 4 ram4 0 0 0 0 0 0 0 0 0 0 0 1 5 ram5 0 0 0 0 0 0 0 0 0 0 0 1 6 ram6 0 0 0 0 0 0 0 0 0 0 0 1 7 ram7 0 0 0 0 0 0 0 0 0 0 0 1 8 ram8 0 0 0 0 0 0 0 0 0 0 0 1 9 ram9 0 0 0 0 0 0 0 0 0 0 0 1 10 ram10 0 0 0 0 0 0 0 0 0 0 0 1 11 ram11 0 0 0 0 0 0 0 0 0 0 0 1 12 ram12 0 0 0 0 0 0 0 0 0 0 0 1 13 ram13 0 0 0 0 0 0 0 0 0 0 0 1 14 ram14 0 0 0 0 0 0 0 0 0 0 0 1 15 ram15 0 0 0 0 0 0 0 0 0 0 0 31 0 mtdblock0 362 5332 11388 2315 0 0 0 0 0 2315 2315 31 1 mtdblock1 0 0 0 0 0 0 0 0 0 0 0 31 2 mtdblock2 0 0 0 0 0 0 0 0 0 0 0 31 3 mtdblock3 0 0 0 0 0 0 0 0 0 0 0 /mnt/ramdisk/rd1 # cat /proc/crypto name : md5 module : kernel type : digest blocksize : 64 digestsize : 16 name : sha1 module : kernel type : digest blocksize : 64 digestsize : 20 name : des module : kernel type : cipher blocksize : 8 min keysize : 8 max keysize : 8 name : des3_ede module : kernel type : cipher blocksize : 8 min keysize : 24 max keysize : 24 name : aes module : kernel type : cipher blocksize : 16 min keysize : 16 max keysize : 32 name : deflate module : kernel type : compression /mnt/ramdisk/rd1 #
Tentatives
Boot on RedBoot
ECHEC
/mnt/jffs2/jffs2_3/system/root # bootmode
Usage : bootmode <get|set> [<system|rescue|bootp>]
/mnt/jffs2/jffs2_3/system/root # bootmode set rescue
Next bootmode set to : rescue (ok)
/mnt/jffs2/jffs2_3/system/root # cat /proc/mtd
dev: size erasesize name
mtd0: 007c5000 00020000 "rootfs"
mtd1: 00100000 00020000 "user"
mtd2: 00600000 00020000 "rescue"
mtd3: 01000000 00020000 "lb_flash"
/mnt/jffs2/jffs2_3/system/root # fcp -v redboot.20040719 /dev/mtd2
Erasing blocks: 2/2 (100%)
Writing data: 192k/192k (100%)
Verifying data: 192k/192k (100%)
boot sur un autre redboot
ECHEC aussi
Stuff
Mini script pour conf internet rapide (res DNS+route defaut)
#/bin/bash route add default gw 192.168.64.254 echo nameserver 8.8.8.8 > /etc/resolv.conf
Le JTAG
Le Pinout serait comme ça :
livebox_thomson.txt · Dernière modification: 2015/01/28 03:09 (modification externe)
Outils de la page
Sauf mention contraire, le contenu de ce wiki est placé sous les termes de la licence suivante : CC Attribution 4.0 International
