Comments (10)
ddcc
commented on June 27, 2024
See https://github.com/firmadyne/firmadyne#usage step 10.
from firmadyne.
bennyjiang
commented on June 27, 2024
delete all files?(/etc/security/) @ddcc
from firmadyne.
ddcc
commented on June 27, 2024
No, the file /etc/securetty
from firmadyne.
commented on June 27, 2024
Even after removing /etc/securetty, its not working. It stucks in netgear123456 login.
from firmadyne.
ddcc
commented on June 27, 2024
I just tried it again, and it works for me.
ddcc@virtual:/home/ddcc/firmadyne$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04.3 LTS
Release: 16.04
Codename: xenial
ddcc@virtual:/home/ddcc/firmadyne$ wget http://www.downloads.netgear.com/files/GDC/WNAP320/WNAP320%20Firmware%20Version%
202.0.3.zip
--2018-02-01 13:53:28-- http://www.downloads.netgear.com/files/GDC/WNAP320/WNAP320%20Firmware%20Version%202.0.3.zip
Resolving www.downloads.netgear.com (www.downloads.netgear.com)... 23.194.181.234
Connecting to www.downloads.netgear.com (www.downloads.netgear.com)|23.194.181.234|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5362552 (5.1M) [application/zip]
Saving to: ‘WNAP320 Firmware Version 2.0.3.zip’
WNAP320 Firmware Version 2.0.3.z 100%[==========================================================>] 5.11M 9.96MB/s in 0.5s
2018-02-01 13:53:29 (9.96 MB/s) - ‘WNAP320 Firmware Version 2.0.3.zip’ saved [5362552/5362552]
ddcc@virtual:/home/ddcc/firmadyne$ python2 ./sources/extractor/extractor.py -sql 127.0.0.1 -b Netgear -np -nk "WNAP320 F
ir.0.3.zip" images
>> Database Image ID: 1
/home/ddcc/firmadyne/WNAP320 Firmware Version 2.0.3.zip
>> MD5: 51eddc7046d77a752ca4b39fbda50aff
>> Tag: 1
>> Temp: /tmp/tmpPZe5Lg
>> Status: Kernel: True, Rootfs: False, Do_Kernel: False, Do_Rootfs: True
>>>> Zip archive data, at least v2.0 to extract, compressed size: 1197, uncompressed size: 2667, name: ReleaseNotes_WNAP320_fw_2.0.3
.HTML
>> Recursing into archive ...
/tmp/tmpPZe5Lg/_WNAP320 Firmware Version 2.0.3.zip.extracted/WNAP320_V2.0.3_firmware.tar
>> MD5: 6b66d0c845ea6f086e0424158d8e5f26
>> Tag: 1
>> Temp: /tmp/tmpRe12LD
>> Status: Kernel: True, Rootfs: False, Do_Kernel: False, Do_Rootfs: True
>>>> POSIX tar archive (GNU), owner user name: "gz.uImage"
>> Recursing into archive ...
/tmp/tmpRe12LD/_WNAP320_V2.0.3_firmware.tar.extracted/kernel.md5
>> MD5: 0e15e5398024c854756d3e5f7bc78877
>> Skipping: text/plain...
/tmp/tmpRe12LD/_WNAP320_V2.0.3_firmware.tar.extracted/root_fs.md5
>> MD5: b43dc86ce23660652d37d97651ba1c77
>> Skipping: text/plain...
/tmp/tmpRe12LD/_WNAP320_V2.0.3_firmware.tar.extracted/rootfs.squashfs
>> MD5: 7ce95b252346d2486d55866a1a9782be
>> Tag: 1
>> Temp: /tmp/tmpDkWtqE
>> Status: Kernel: True, Rootfs: False, Do_Kernel: False, Do_Rootfs: True
>>>> Squashfs filesystem, big endian, lzma signature, version 3.1, size: 4433988 bytes, 1247 inodes, blocksize: 6553
6 bytes, created: 2011-06-23 10:46:19
>>>> Found Linux filesystem in /tmp/tmpDkWtqE/_rootfs.squashfs.extracted/squashfs-root!
>> Skipping: completed!
>> Cleaning up /tmp/tmpDkWtqE...
>> Skipping: completed!
>> Cleaning up /tmp/tmpRe12LD...
>> Skipping: completed!
>> Cleaning up /tmp/tmpPZe5Lg...
ddcc@virtual:/home/ddcc/firmadyne$ ./scripts/getArch.sh ./images/1.tar.gz
./bin/busybox: mipseb
Password for user firmadyne:
ddcc@virtual:/home/ddcc/firmadyne$ sudo ./scripts/makeImage.sh 1
Querying database for architecture... Password for user firmadyne:
mipseb
----Running----
----Copying Filesystem Tarball----
----Creating QEMU Image----
Formatting '/home/ddcc/firmadyne//scratch//1//image.raw', fmt=raw size=1073741824
----Creating Partition Table----
Welcome to fdisk (util-linux 2.27.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.
Device does not contain a recognized partition table.
Created a new DOS disklabel with disk identifier 0xe25f2684.
Command (m for help): Created a new DOS disklabel with disk identifier 0xa1092823.
Command (m for help): Partition type
p primary (0 primary, 0 extended, 4 free)
e extended (container for logical partitions)
Select (default p): Partition number (1-4, default 1): First sector (2048-2097151, default 2048): Last sector, +sectors or +size{K,M
,G,T,P} (2048-2097151, default 2097151):
Created a new partition 1 of type 'Linux' and of size 1023 MiB.
Command (m for help): The partition table has been altered.
Syncing disks.
----Mounting QEMU Image----
add map loop0p1 (252:0): 0 2095104 linear 7:0 2048
----Creating Filesystem----
mke2fs 1.42.13 (17-May-2015)
Discarding device blocks: done
Creating filesystem with 261888 4k blocks and 65536 inodes
Filesystem UUID: c9ce7740-29bc-4ceb-8536-60088cc04809
Superblock backups stored on blocks:
32768, 98304, 163840, 229376
Allocating group tables: done
Writing inode tables: done
Writing superblocks and filesystem accounting information: done
----Making QEMU Image Mountpoint----
----Mounting QEMU Image Partition 1----
----Extracting Filesystem Tarball----
----Creating FIRMADYNE Directories----
----Patching Filesystem (chroot)----
Warning: Recreating device nodes!
Removing /etc/scripts/sys_resetbutton!
----Setting up FIRMADYNE----
----Unmounting QEMU Image----
loop deleted : /dev/loop0
ddcc@virtual:/home/ddcc/firmadyne$ ./scripts/inferNetwork.sh 1
Querying database for architecture... Password for user firmadyne:
mipseb
Running firmware 1: terminating after 60 secs...
qemu-system-mips: terminating on signal 2 from pid 83944
Inferring network...
Interfaces: [('brtrunk', '192.168.0.100')]
Done!
ddcc@virtual:/home/ddcc/firmadyne$ sudo ./scripts/mount.sh 1
----Running----
----Adding Device File----
add map loop0p1 (252:0): 0 2095104 linear 7:0 2048
----Making image directory----
----Mounting----
ddcc@virtual:/home/ddcc/firmadyne$ rm scratch/1/image/etc/securetty
rm: remove write-protected regular file 'scratch/1/image/etc/securetty'? y
ddcc@virtual:/home/ddcc/firmadyne$ sudo ./scripts/umount.sh 1
----Running----
----Unmounting----
----Disconnecting Device File----
loop deleted : /dev/loop0
ddcc@virtual:/home/ddcc/firmadyne$ ./scratch/1/run.sh
Creating TAP device tap1_0...
Set 'tap1_0' persistent and owned by uid 1000
Bringing up TAP device...
Adding route to 192.168.0.100...
Starting firmware emulation... use Ctrl-a + x to exit
....
Welcome to SDK.
Have a lot of fun...
netgear123456 login: root
Password:
[root@netgear123456 /root]#
from firmadyne.
commented on June 27, 2024
I have tried the above mentioned steps one by one. I am using 14.04 on virtual box. It again stucks on netgear login. rest all the steps are working fine and giving the same output as yours, except last step of running run.sh. By the way , what was your password for netgear123456? and what to do after login?
from firmadyne.
ddcc
commented on June 27, 2024
It's the same as the instructions; the password is just password. After logging in, you can do whatever you want to the emulated firmware. Note that I've omitted a bunch of the kernel messages and startup text from the boot. Are you sure it's not logging in; e.g. if you hit enter a few times, it doesn't do anything?
from firmadyne.
commented on June 27, 2024
Thanks so much. It worked ....!!!!
from firmadyne.
commented on June 27, 2024
Could you please give me a example of few commands which I can try after logging into the Netgear123456?
Any help is appreciated...!!!!
from firmadyne.
ddcc
commented on June 27, 2024
I'm not sure what you want to do. As stated in the README and paper, this is a tool for emulating embedded firmware. You get the equivalent of having attached a physical console to the device, but without needing the actual hardware. So you could look through the binaries on the system, figure out what services are running and listening on the network, etc.
from firmadyne.
Related Issues (20)
- extractor.py needs to be run as root with the latest binwalk HOT 2
- Firmadyne is unable to create any other image and image id 8
- Erorr file inferNetwork.sh and erorr message: "swRegRead: Operation not supported" when run file run.sh HOT 5
- Unable to emulate any firmware HOT 1
- Error in makeImage.sh HOT 3
- Emulation failing with Kernel panic - not syncing: No working init found. Try passing init= option to kernel. HOT 2
- inferNetwork.sh didn't find any network interfaces HOT 4
- Error: Cannot open file --run-as=root HOT 6
- [ 210.320000] firmadyne: ioctl: 0x4 HOT 1
- inferNetwork.sh UnicodeDecodeError HOT 4
- Netgear123456 root password issue HOT 1
- Need debugging help
- EXT2-fs sda1 error deleted inode refrence in tplink archer c6 HOT 1
- I have an error while trying to emulate RAXE300 firmware version 1.0.7.62
- When I simulated the router firmware, an error was reported. Why?
- Add ability to disable IPv6
- Remove need for SQL database HOT 1
- extractor error
- No images when running the extractor on the sample firmware HOT 1
- [help wanted] No connection between Emu-Dev and client
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from firmadyne.