#1 2007-12-04 08:41:52
解除FON ssh封印畫面
這兩天閒來無事把封藏已久的FON一代機拿出來把玩，根據網路上的破解方式，成功解除ssh封印，ssh進入後，看看FON裡頭的資訊。
login as: root
root@192.168.10.1's password: *****
BusyBox v1.1.3 (2006.11.21-19:49+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
_______ _______ _______
| ____|| || _ |
| ____|| - || | | |
| | |_______||__| |__|
|___|
Fonera Firmware (Version 0.7.2 rev 2) -------------
*
* Based on OpenWrt - http://openwrt.org
* Powered by FON - http://www.fon.com
---------------------------------------------------
root@OpenWrt:~#
root@OpenWrt:~# ps
PID Uid VmSize Stat Command
1 root 396 S init
2 root SW [keventd]
3 root SWN [ksoftirqd_CPU0]
4 root SW [kswapd]
5 root SW [bdflush]
6 root SW [kupdated]
8 root SW [mtdblockd]
16 root 400 S syslogd -C 16
17 root 444 S /bin/sh /etc/init.d/rcS
18 root 380 S logger -s -p 6 -t
20 root 396 S init
22 root 360 S klogd
49 root SWN [jffs2_gcd_mtd2]
115 root 284 S lock /var/run/restart-services
433 root 408 S /usr/sbin/dropbear
439 root 420 S httpd -p 80 -h /www -r OpenWrt
529 root 432 S crond -c /etc/crontabs
547 root 424 S /usr/sbin/httpd -R /cgi-bin/splash.sh -H 192.168.10.1
548 root 328 S watchdog -t 5 /dev/misc/watchdog
549 root 328 D watchdog -t 5 /dev/misc/watchdog
659 nobody 472 S dnsmasq -C /etc/dnsmasq.conf --dhcp-range=192.168.10.
673 root 480 S hostapd -B /tmp/hostapd.conf
869 root 1320 S /usr/sbin/chilli --dns1=192.168.182.1 --dns2=192.168.
874 root 432 S /bin/sh /usr/sbin/watch_chilli
875 root 276 S lock -w /var/run/restart-services
4566 root 612 R /usr/sbin/dropbear
4615 root 488 S -ash
5808 root 300 S sleep 1
5809 root 368 R ps
root@OpenWrt:~#
看了一下，原來FON核心就是用OpenWRT改造而成的，而且如果你的機器可以安裝OpenWRT或DD-WRT的等常見的第三方firmware，或許也可以安裝支援FON的客制firmware套件，一起加入FON家族。
原來裡面也有一個ipkg，看一下預設安裝了哪些模組？
root@OpenWrt:~# ipkg list_installed
base-files-ar531x-2.4 - 8 -
bridge - 1.0.6-1 -
busybox - 1.1.3-1 -
chillispot-fon - 1.0-1 -
coova - 4-1 -
dnsmasq - 2.27-1 -
dnsmasq-fon - 2.38-1 -
dropbear - 0.48.1-1 -
foncheckrsa - 0.1-1 -
haserl - 0.8.0-1 -
hostapd-mini - 0.5.3-1 -
iptables - 1.3.5-1 -
iptables-mod-conntrack - 1.3.5-1 -
iptables-mod-extra - 1.3.5-1 -
iptables-mod-filter - 1.3.5-1 -
iptables-mod-imq - 1.3.5-1 -
iptables-mod-ipopt - 1.3.5-1 -
iptables-mod-nat - 1.3.5-1 -
kernel - 2.4.32-ar531x-1 -
kmod-ar531x-wdt - 2.4.32-ar531x-1 -
kmod-gre - 2.4.32-ar531x-1 -
kmod-imq - 2.4.32-ar531x-1 -
kmod-ipt-conntrack - 2.4.32-ar531x-1 -
kmod-ipt-extra - 2.4.32-ar531x-1 -
kmod-ipt-filter - 2.4.32-ar531x-1 -
kmod-ipt-ipopt - 2.4.32-ar531x-1 -
kmod-ipt-nat - 2.4.32-ar531x-1 -
kmod-madwifi - 2.4.32+0.9.0-ar531x-1 -
kmod-mini-fo - 2.4.32+0.6.2pre1-ar531x-1 -
kmod-ppp - 2.4.32-ar531x-1 -
kmod-pppoe - 2.4.32-ar531x-1 -
kmod-sched - 2.4.32-ar531x-1 -
libgcc - 3.4.6-8 -
mtd - 4 -
ntpclient - 2003_194-2 -
ppp - 2.4.3-7 -
ppp-mod-pppoe - 2.4.3-7 -
pptp - 1.6.0-3 -
qos-scripts - 0.9.1-1 -
tc - 2.6.15-060110-1 -
uclibc - 0.9.28-8 -
webif-fon - 0.2-1 -
wireless-tools - 28-1 -
Done.
root@OpenWrt:~#
大概就是 chillispot,dropbear,iptables,ppp... 這些模組，不曉得能不能安裝lighttpd,fastcgi,sqlite？
我會不會想太多了 
技術問題請於論壇上集眾人之力公開討論，感恩
離線
