[ 866 posts ] Go to page Previous  1, 2, 3, 4, 5, 6, 7 ... 44  Next
Post new topic Reply to topic  Board index » Internet Media Tablets » Open Development
Archos 605wifi hacked (604wifi too probably) 
Author Message
Archos Guru
Archos Guru

Posts: 445
Joined: Wed Nov 21, 2007 6:41 pm
Tue Jan 01, 2008 12:16 am Post 
maflow wrote:
I just got idea to edit some files (/usr/opera/fonts/fonts.dir, fonts are ok) to support my codepage in web broswer. But I cant write it back on Archos because it says "Read-only file system". Any idea?


you could try something like
Code:
mount -oremount,rw /


/ seems to be mounted read-only on a ram-disk /dev/ram0 by default (but this may be required for a cramfs filesystem), this is the output of mount:

Code:
/dev/ram0 on / type cramfs (ro)
/proc on /proc type proc (rw,nodiratime)
devpts on /dev/pts type devpts (rw)
tmpfs on /tmp type tmpfs (rw)
sysfs on /sys type sysfs (rw)
/dev/hda1 on /mnt/data type vfat (rw,noatime,nodiratime,gid=66,fmask=0000,dmask=0000,shortname=mixed,utf8)
/dev/hda2 on /mnt/system type ext3 (rw,noatime,data=ordered)
/dev/loop0 on /opt type cramfs (ro)
usbfs on /proc/bus/usb type usbfs (rw)emount,rw /


Last edited by sideways on Tue Jan 01, 2008 12:32 am, edited 1 time in total.

Profile
Archos Guru
Archos Guru

Posts: 679
Location: Brooklyn, NY
Joined: Tue Oct 16, 2007 1:33 am
Tue Jan 01, 2008 12:21 am Post 
Oh, if it doesn't get a sticky, I'm sure it will get bumped back up all the time :)

Anyone try lspci, lspnp, lsmod, ps -Aux ? I'm so tempted to get on the bandwagon, but my Archos already serves me so well, I wouldn't want to hurt it :) The thought of turning up the gain on the wifi antenna (among other things) is really nagging me to try though....


Profile
Archos Guru
Archos Guru

Posts: 397
Joined: Thu Sep 06, 2007 4:12 am
Tue Jan 01, 2008 12:26 am Post 
Sweet! it works!

Tried ps -aux
Code:
  PID  Uid     VmSize Stat Command
    1 root        328 S   init     
    2 root            SW< [ksoftirqd/0]
    3 root            SW< [desched/0]
    4 root            SW< [events/0]
    5 root            SW< [khelper]
   10 root            SW< [kthread]
   31 root            SW< [kblockd/0]
   74 root            SW  [pdflush]
   75 root            SW  [pdflush]
   77 root            SW< [aio/0]
   76 root            SW  [kswapd0]
  674 root            SW< [msp/0]
  703 root            DW< [keypadd]
  705 root            SW< [irrd]
  849 root            SW< [resz/0]
  876 root            SW  [khubd]
  912 root            SW< [hdpwrd/hda]
  924 root            SW< [spi_dvnc]
  945 root            SW< [av604ts]
  957 root            SW< [imgdma/0]
  977 root        352 S   /bin/sh /usr/bin/avos_helper.sh
  981 root      24840 S   /usr/bin/avos
  982 root       3320 S   /usr/bin/avos
  991 root      24840 S   /usr/bin/avos
  992 root      24840 S   /usr/bin/avos
1016 root            SW< [hpmon]
1128 root      24840 S   /usr/bin/avos
2185 root      24840 S   /usr/bin/avos
2311 root            SW< [wlan_main_servi]
2312 root            SW< [wlan_reassoc_se]
2324 root        436 S   /usr/sbin/wpa_supplicant -P /var/run/wpa_supplicant.p
2362 root            SW  [kjournald]
2363 root            SW< [loop0]
2368 root        988 S   /usr/bin/downloadd
2369 root        988 S   /usr/bin/downloadd
2370 root        988 S   /usr/bin/downloadd
2371 root      24840 S   /usr/bin/avos
2378 root      24840 S   /usr/bin/avos
2409 root        360 S   /sbin/udhcpc -i eth0 -s /etc/udhcpc.script -p /var/ru
2410 root      24840 S   /usr/bin/avos
2412 root      24840 S   /usr/bin/avos
2414 root      24840 S   /usr/bin/avos
2415 root      24840 S   /usr/bin/avos
2421 65534       540 S   /usr/bin/upnpd
2422 65534       540 S   /usr/bin/upnpd
2423 65534       540 S   /usr/bin/upnpd
2425 65534       540 S   /usr/bin/upnpd
2427 65534       540 S   /usr/bin/upnpd
2428 65534       540 S   /usr/bin/upnpd
2456 root       1028 S   /tmp/ssh/sshd -f /tmp/ssh/sshd_config
2472 root       1216 S   /tmp/ssh/sshd: root@pts/0               
2473 root        424 S   -sh
2480 root        336 R   ps -aux


Profile
Archos Guru
Archos Guru

Posts: 397
Joined: Thu Sep 06, 2007 4:12 am
Tue Jan 01, 2008 12:27 am Post 
Has anyone found a way to copy files from the archos?


Profile
Archos Guru
Archos Guru

Posts: 397
Joined: Thu Sep 06, 2007 4:12 am
Tue Jan 01, 2008 12:29 am Post 
lsmod:
Code:
Module                  Size  Used by
sd8xxx                109557  1
sdio                    4481  2 sd8xxx
davinci_imgdma          2801  1
fuse                   21933  0
af_packet               8329  2
av5604ts                4581  0
tsdev                   3457  1
sdio_host_davinci       6493  1
sdio_dma_davinci        1321  1 sdio_host_davinci
sdio_core               5173  2 sdio,sdio_host_davinci
hx5078                  1730  1
hx5078_spi              1697  1 hx5078
spi_davinci             5253  0
spi_core                5637  3 av5604ts,hx5078_spi,spi_davinci
hdpwrd                  2269  0
davinci_vpfe            9613  0
video_buf              11941  1 davinci_vpfe
v4l2_common             4257  1 davinci_vpfe
videodev                4513  1 davinci_vpfe
davinci_audio_wm8985     9077  1
wm87xx                  2169  0
davinci_audio           6485  1 davinci_audio_wm8985
davinci_audio_dma_intfc     4897  1 davinci_audio
soundcore               3589  2 davinci_audio_wm8985
usbcore                68957  0
ocvc                     717  0
lpm                     5105  3 ocvc
dsplinkk               47761  1 lpm
davinci_resz            3757  1
dmalloc                 2509  2


Profile
Archos Guru
Archos Guru

Posts: 445
Joined: Wed Nov 21, 2007 6:41 pm
Tue Jan 01, 2008 12:29 am Post 
ranceramos wrote:
Oh, if it doesn't get a sticky, I'm sure it will get bumped back up all the time :)

Anyone try lspci, lspnp, lsmod, ps -Aux ? I'm so tempted to get on the bandwagon, but my Archos already serves me so well, I wouldn't want to hurt it :) The thought of turning up the gain on the wifi antenna (among other things) is really nagging me to try though....


Not all commands are available, but quite a few (dmesg produces interesting output)

Code:
ls /bin
ash      chgrp  cp    df     false  login  mkdir  mount  ps   rmdir  sleep  touch   usleep
busybox  chmod  date  dmesg  kill   ls     mknod  mv     pwd  sed    stty   umount
cat      chown  dd    echo   ln     lsmod  more   pidof  rm   sh     sync   uname

ls /usr/bin
[               clear      du    hexdump  openvt   tail  uniq              usbdisc
avos            cut        env   id       passwd   tee   upnpd             vlock
avos_helper.sh  deallocvt  expr  killall  renice   test  upnpd_prepare.sh  yes
basename        dirname    free  ldd      reset    time  uptime
chvt            downloadd  head  logname  strings  top   usbcon

ls /sbin/
depmod                  halt     ifconfig  insmod.static  modinfo     poweroff  route    swapon
generate-modprobe.conf  hdparm   init      ldconfig       modprobe    reboot    sulogin  udhcpc
getty                   hwclock  insmod    mkdosfs        pivot_root  rmmod     swapoff

ls /usr/sbin
fbset  iwconfig  iwgetid  iwlist  iwpriv  iwspy  rdate  wpa_supplicant


Profile
Archos User
Archos User

Posts: 94
Joined: Mon Dec 31, 2007 12:58 am
Tue Jan 01, 2008 12:30 am Post 
this sounds great. I just hope archos doesnt focus *too much* attention to making this hack inoperable in the upcomming firmware releases and work on whats really important

_________________
605 WIFI 4GB


Profile
Archos Guru
Archos Guru

Posts: 679
Location: Brooklyn, NY
Joined: Tue Oct 16, 2007 1:33 am
Tue Jan 01, 2008 12:33 am Post 
Awesome, thanks guys! Looks like we have a modularized kernel...I think you're going to see things move REALLY fast to what some were asking for in the other hacking thread.

Lots of stuff to work with here


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:34 am Post 
I've uploaded the usbkbd.ko and usbmouse.ko modules I cross-compiled, my previous effort to use them didn't work and I'm at work right now so I can't pay around with them at all, but you may be able to insmod them and tweak them to work.

They're in the download section of the arcwelder project now, if you need other modules let me know and I can include them, but when I poked around on a linux system I _think_ you only need usbcore loaded to use them, I could be wrong..

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:35 am Post 
scott0999 wrote:
this sounds great. I just hope archos doesnt focus *too much* attention to making this hack inoperable in the upcomming firmware releases and work on whats really important


Sadly, it'll be a one line fix to make GFT obsolete, but we have access to the operating system now, we can figure out how it works and get additional deeper exploits working if needbe.

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 90
Joined: Sat Dec 29, 2007 5:00 pm
Tue Jan 01, 2008 12:35 am Post 
Do you need a Linux based computer to run this program well?

What are the chances that by INSTALLING this on my archos, i will render it unusable (bricked)? I am a novice coder, and would like to get in on the action. Thanks in advance...


HAPPY NEW YEARS TO ALL!!!!!!


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:41 am Post 
cyclonezephyrxz7 wrote:
Do you need a Linux based computer to run this program well?

What are the chances that by INSTALLING this on my archos, i will render it unusable (bricked)? I am a novice coder, and would like to get in on the action. Thanks in advance...


HAPPY NEW YEARS TO ALL!!!!!!


The installation has no lasting footprint, everything is installed in /tmp/ and runs harmoniously with the existing operating system. Any damage you do once you're ssh'd in.. that's another matter entirely.

No promises, this could break your archos, but so far mine is running fine.

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:46 am Post 
Another interesting likely non-destructive trick, in Unix you can double-mount directories, so if you had a read only directory you could mount a r/w directory on top of it, applications that have open file handles will still be reading data off the original filesystem but any new application launches will read off the newly mounted directory.

An example of how this might be useful is the guy who wanted to change the Opera fonts.. if you could make a mirror of the folder on a r/w portion of disk and then remount it, if Opera hadn't been started yet, when you started it, it'd (I think) use the r/w partition instead since you double mounted it.

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 90
Joined: Sat Dec 29, 2007 5:00 pm
Tue Jan 01, 2008 12:46 am Post 
So basically this program allows the user to access files used by the system that we wouldnt normally be able to access?

Sorry for all the questions, i am just trying to assess wheather or not to take the risk of installing the program....


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:48 am Post 
cyclonezephyrxz7 wrote:
So basically this program allows the user to access files used by the system that we wouldnt normally be able to access?

Sorry for all the questions, i am just trying to assess wheather or not to take the risk of installing the program....


Basically, yeah. You can get at the running environment and run programs, right now unless you're a unix guy there's no need for you to install arcwelder. In a couple of weeks once the unix guys have had a chance to poke it and they start releasing their own add-ons, then you'll be able to install their stuff. :p But, remember, any third party software runs the risk of bricking your Archos, and you have no recourse to resolve it if that happens. Archos won't shed a tear for you.

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 12:56 am Post 
Other interesting commands you can run:

sysctl -a
ifconfig -a
dmesg

Also, a good place to find info is in /proc, a virtual interface to system/memory. One thing I'm particularly interested in is

cat /proc/cmdline

That will yield the string passed to the kernel when booting up.

Also, if someone could figure out how the bootloader works, it would seem that it has a pre-loader that mounts the rootfs into flash? ..

I'm at work so I can't try any of this stuff. :D

_________________
arcwelder


Profile
Archos Guru
Archos Guru

Posts: 397
Joined: Thu Sep 06, 2007 4:12 am
Tue Jan 01, 2008 12:57 am Post 
fiat: is it possible to scp or ftp onto the 605 to copy files? Is there a way to read files on the 605 itself?
Thanks


Profile
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 1:03 am Post 
thethirdmoose wrote:
fiat: is it possible to scp or ftp onto the 605 to copy files? Is there a way to read files on the 605 itself?
Thanks


You should be able to scp, I can't think of any reason why it wouldn't work.
sftp is on there and registered as a sub-system but untested, lftp can be used to use the 'fish://' protocol tho prolly.

_________________
arcwelder


Profile
Archos User
Archos User

Posts: 97
Location: Czech Republic
Joined: Sun Nov 11, 2007 5:49 pm
Tue Jan 01, 2008 1:35 am Post 
This is my 705, how's the 605? :)
Code:
cat /proc/meminfo
MemTotal:       101668 kB
MemFree:          5264 kB
Buffers:         22784 kB
Cached:          56856 kB
SwapCached:          0 kB
Active:          56508 kB
Inactive:        30412 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:       101668 kB
LowFree:          5264 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               0 kB
Writeback:           0 kB
Mapped:          16584 kB
Slab:             2568 kB
CommitLimit:     50832 kB
PageTables:        340 kB
VmallocTotal:   425984 kB
Committed_AS:    36876 kB
VmallocUsed:      1172 kB
VmallocChunk:  4071424 kB


Code:
cat cpuinfo
Processor       : ARM926EJ-Sid(wb) rev 5 (v5l)
BogoMIPS        : 120.32
Features        : swp half thumb fastmult edsp java
CPU implementer : 0x41
CPU architecture: 5TEJ
CPU variant     : 0x0
CPU part        : 0x926
CPU revision    : 5
Cache type      : write-back
Cache clean     : cp15 c7 ops
Cache lockdown  : format C
Cache format    : Harvard
I size          : 16384
I assoc         : 4
I line length   : 32
I sets          : 128
D size          : 8192
D assoc         : 4
D line length   : 32
D sets          : 64

Hardware        : Archos A705
Revision        : 0000
Serial          : 0000000000000000



I still cant get write access in /usr. ("mount -o remount,rw /" doesnt seems to help) Have you tried that?


Last edited by maflow on Tue Jan 01, 2008 1:45 am, edited 2 times in total.

Profile ICQ WWW
Archos User
Archos User

Posts: 65
Joined: Sat Dec 29, 2007 9:41 am
Tue Jan 01, 2008 1:36 am Post 
Hmm. /proc/cmdline is pretty cut and dry..

root=/dev/hda2 init=linuxrc

There's a pretty good chance that a full distro could be rolled with very little effort.

_________________
arcwelder


Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 866 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6, 7 ... 44  Next



Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB © phpBB Group.
Designed by Vjacheslav Trushkin for Free Forum/DivisionCore.