miercuri, 5 martie 2008

Enable SSH on version 0.7.2 r3


This guide will show you how to enable SSH on firmware version 0.7.2 r3.



In able to do this hack, you will need a router in addtion to the Fonera. This router is used to point to the Kolofonium DNS server and pass it down to the Fonera. Here is what your network should look like after everything is done:



fonera firmware flash network config










1.







Enter your router's configuration page and edit the following settings:



  • LAN IP Address: 213.134.45.129

  • Subnet Mask: 255.255.255.0

  • Primary and Secondary DNS Servers: 88.198.165.155



Router Configuration







2.





Power on the Fonera and connect it to the router. Connect to the Fonera wirelessly using the "MyPlace" access point and your serial # as the WPA key. Direct your browser to "192.168.10.1" and you will see the page below.





fonera main config page






3.





Go to "Advanced" and then to "Internet Connection". Here, you will have to change a few things:



  • Mode: Static IP

  • IP Address: 213.134.45.200

  • Network Mask: 255.255.255.0

  • Gateway: 213.134.45.129

  • DNS Server: 213.134.45.129



fonera configuration settings








4.





Click "Submit" and then hold down the reset button on the Fonera for 30 seconds. This will force the Fonera to force an auto update check. Once it sees the Kolofonium server, it will downgrade itself to version 0.7.1 r1. Wait 3-5 minutes after reseting before checking on success. To see if everything went fine, connect wirelessly and browse to "192.168.1.1". This is what you should see:



downgrade fonera version 0.7.1 r1 firmware flash









5.





If the above didn't work, try it again. Make sure to hold the reset button down for at least 30 seconds. If everything went well, download this script (Right Click, Save As) which will send a command to the Fonera and tell it to enable SSH. Open the file in your web browser, like Firefox, and click on the "Submit" button.



html attack script fonera



Code:



<html>

<head>

</head>


<body>

<center>

<form method="post" action="http://192.168.10.1/cgi-bin/webif/connection.sh " enctype="multipart/form-data">

<input name="username" value="$(/etc/init.d/dropbear)" size="68" >


<input type="submit" name="submit" value="Submit" onClick="{this.form.wifimode.value='";' + this.form.wifimode.value +';"'}" />


</form>

</body>

</html>




6.






After you hit "Submit", you should be redirected to the Fonera.



fonera hacks



SSH should now be enabled. Connect wirelessly to the Fonera and try to SSH into "192.168.10.1"







7. (Important)







After enabling SSH, immediately connect to the Fonera via SSH.





enable ssh on fonera



The "ssh_fonera_enable.html" script only enables SSH for one instance. That means, if you reboot or turn the Fonera off, you will lose SSH access all together and you will have to run the "ssh_fonera_enable.html" script again.



To enable SSH permanently, you will need to enter the command:




mv /etc/init.d/dropbear /etc/init.d/S50dropbear






SSH is now enabled permanently. Click "Next" to continue to the rest of the flashing process.




Niciun comentariu: