Home

Forums

Statistics

Surveys

Top Ten

Your Account


Login
Nickname

Password

Security Code: Security Code
Type Security Code

Don't have an account yet? You can create one. As a registered user you have some advantages like a private journal and posting comments or additions to articles.

Who's Online
There are currently, 11 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here

Donations
If you find the information here useful,
help keep this web site online with a donation!
YTD Donations
$1.00
Thank You!

Host referer


  
2: Adding FULL FTP Access
Posted on Friday, August 29 @ 20:52:37 CDT
Topic: 2: Toshiba Magnia hacks

-WARNING-

It is ASSUMED that you are running your magnia with the FIREWALL ON.

If you do this, and leave the firewall off, people WILL hack your system!

Get a telnet program - I recommend TeraTerm Pro
Telnet into the magnia: 192.168.1.1 is the default address.

Red Hat Linux release 7.3 (Valhalla)
Kernel 2.4.18-3custom on an i686
login: telnetuser
Password: **********
(password is whatever your default -appliance admin- password is)
bash-2.05a$ su -
Password: **********
(password is whatever your default -appliance admin- password is)
[root@magnia root]# cd /etc
[root@magnia etc]# vi ftpaccess


Now be carefull with your keys!
You want to add "real,guest," back in before anonymous
You also want to change root's permission to 666
Move to the "a" of the line "class all anonymous *" with your arrow keys.
press "i" (for insert) on your keyboard.
type "real,guest," then hit the "ESC" key on your keyboard.
Use your arrow keys to move to the first zero of "600"
Hit "x" twice to delete those zeroes.
Hit "a" (append) and "66"
Hit the "ESC" key

File should look like this:

# DO NOT EDIT THIS FILE! IT IS AUTOGENERATED!
# edit the files in /sa2/templates/etc/ftpaccess
# to modify this file, then call /sa/bin/template
#
class    all    real,guest,anonymous *

email root@localhost

readme README*   login
readme README*   cwd=*

message /welcome.msg     login
message .message             cwd=*

compress     yes     all
tar               yes     all
chmod         no     anonymous
delete         no     anonymous
overwrite     no     anonymous
rename         no     anonymous
upload     /home/ftp     /incoming     yes     root     root     666

log transfers anonymous inbound,outbound
#


shutdown /etc/shutmsg
# END AUTOGENERATED TEMPLATE


HOLD shift and hit "ZZ" to save and exit file.
"ftpaccess" 27L, 687C written
[root@magnia etc]#


Now that real users are able to gain ftp access you're set, right?
Nope, only "root" seems to have full ftp access, and root is blocked by default.
You must now edit ftpusers

[root@magnia etc]# vi ftpusers

Just move around with your arrows to the "r" of "root"
Hit "x" four times to remove root
File should look like this:

# The ftpusers file is deprecated. Use deny-uid/deny-gid in ftpaccess.

bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody
~
~
~
~
~
~
~
~
"ftpusers" 15L, 150C 2,0-1 All


HOLD shift and hit "ZZ" to save and exit file.
"ftpusers" 15L, 146C written
[root@magnia etc]#


You now have full ftp access to your magnia's file system.
Keep in mind that if you don't edit /sa2/templates/etc/ftpaccess/10base to match your changes in /etc/ftpaccess then sooner or later a trigger will wipe out your changes, so edit that file as soon as you can.



Remember: Questions can be posted in the FORUM section !


 
Related Links
· More about 2: Toshiba Magnia hacks
· News by anoldman


Most read story about 2: Toshiba Magnia hacks:
1: Magnia SG20


Article Rating
Average Score: 5
Votes: 1


Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


Options

 Printer Friendly Printer Friendly

 Send to a Friend Send to a Friend


Please take a second and vote for this article.
Web site powered by PHP-Nuke

All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © 2003 by AnOldMan.com
PHP-Nuke Copyright © 2004 by Francisco Burzi. This is free software, and you may redistribute it under the GPL. PHP-Nuke comes with absolutely no warranty, for details, see the license.
Page Generation: 0.07 Seconds