Тёмный
No video :(

Accessing Hidden Serial Consoles - USB-to-TTL Demo 1/2 - Hardware Hacking Series #4 

Crazy Danish Hacker
Подписаться 27 тыс.
Просмотров 20 тыс.
50% 1

In this video I demonstrate how to connect the USB-to-TTL device and access the serial console with PuTTy! I also show what a bad connection looks like, i.e. when you've mixed up the TX and RX cables, the boot loader menu, and last but not least, interesting boot messages that may enable us to gain root at a later point in time.
*** Want early access to my videos? Check out my Patreon page! All Patreons get early access to my videos.
Warranty Disclaimer: By opening and modifying your router you forfeit/nullify all warranties. If you break your router while modifying it like I do in my videos, then it is your own fault. Soldering on equipment is not without risks. (I haven't managed to break my routers yet though.)
Topics Covered:
- UART Pin Header
- Connecting a USB-to-TTL cable
- Configuring & Using PuTTy
- Troubleshooting Bad Cable Connections
- Serial Console Demo
- Boot Loader Menu (U-BOOT)
- Boot Arguments & Single-User Mode
- Interesting Boot Messages
-- Kernel Version Vulnerable
Hardware:
- USB to TTL Serial Cable (www.adafruit.c...) Alternatively: www.sparkfun.c...
- TP Link Router (TL-WA801ND)
Stay tuned and subscribe for more upcoming videos showing actual hacks!
Twitter: @CrazyDaneHacker
Facebook: / crazydanishhacker
Patreon: / crazydanishhacker

Опубликовано:

 

26 авг 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 24   
@foudilgarouche3147
@foudilgarouche3147 7 лет назад
Good job , i like
@Veso266
@Veso266 7 лет назад
will you upload a video showing how to modify TP-Link Firmware and flash it back? (posibly embeding a shell into fw along the way)
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
That's the plan, haven't begun "researching" this yet but it's 100% possible.
@Knightonlinevideos
@Knightonlinevideos 7 лет назад
first thing first, 1, this is not a "salted" hash, its only a MD5 UNIX hash 2, the password for $1$GTN.gpri$DlSyKvZKMR9A9Uj9e9wR3/ , is sohoadmin 3, can u show how u obtain the hash? thanks
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
1. It IS a salted hash. "GTN.gpri" is the salt. "DlSyKvZKMR9A9Uj9e9wR3/" is the actual hash. Refer to the following forum articles for the shadow format: www.backtrack-linux.org/forums/showthread.php?t=39771 , www.aychedee.com/2012/03/14/etc_shadow-password-hash-formats/ and en.wikipedia.org/wiki/Passwd 2. Thanks, I don't know why I didn't think about googling the hash until you posted the plain text xD 3. Yes I will in a future video :-)
@Knightonlinevideos
@Knightonlinevideos 7 лет назад
happy its working for ya :) now u can continue to show some nice video
@DeniTheAccursed
@DeniTheAccursed 7 лет назад
Take off the video about imsi catcher, it can be realized with the help of blade rf :)
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
I know, but it's not very reliable and it's only 2G. Refer to the following paper for example: www.delaat.net/rp/2015-2016/p86/report.pdf
@DeniTheAccursed
@DeniTheAccursed 7 лет назад
Thank you :) there is an article how to connect your cell with an external operator ? so the victim could,as usual, to communicate (texting,calling, etc) I have a fake cell,but I don't know how to forward traffic to the external network,I want to catch incoming SMS and all :) on the Internet there is no information how to do it :(((
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
You can forward calls and SMS using maybe a VoIP gateway or something else. You can forward GPRS/WAP traffic through your own Internet connection. And no you can't redirect incoming calls because the other mobile networks don't know your network exists.
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
If you read the paper in full, you would see that there is a guide to forwarding GPRS traffic. For VoIP stuff, I recommend googling until you find the answer. Keywords: yatebts, voip, gateway.
@micolashhostofthenightmare1150
Crazy Danish Hacker There hackrf is used, and I have openbts motorola: ((asterisk is installed, but I do not know what to do next ((
@mo.downhill6760
@mo.downhill6760 7 лет назад
Hello Bro before couple day i had a wimax modem device i uploaded hd pictures front look : www.googledrive.eb2a.com/1.jpg Back look:www.googledrive.eb2a.com/2.jpg ITEM:INTERNET MODEM MODEL-SWU-9000 WIMAX MODEM (they call it MIFI) and by the way i can login using telnet because it's turned on even the login of admin is accessible www.googledrive.eb2a.com/3.PNG and i can't Do any Thing with it because it isn't root I've test many passwords with no avail i will apply any suggestions and would like to know on which pins should i attach the multi mater Thanks for Your useful videos ....
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
Next time please use a web site like imgur to upload your pictures, it's very odd that you need to have JavaScript enabled to view those images on your website. The first image is a photoshopped woman? i.imgur.com/uuZQXbA.png Looks like an older female version of myself from an alternate universe lol Concerning the second image, the debug port is possibly JTAG, or maybe a proprietary type of debugger. As I mentioned earlier, it's very likely that this USB port has a multiplexer built into it, which means that depending on the type of resistance on the "ID pin" you may get different modes which I mentioned in a previous comment. This requires a bit of skills but it is possible to do. It looks interesting that you can log in using telnet, I'm assuming the password was also admin? In that case it's almost certainly hardcoded and not ideal to have enabled by default. With the telnet interface the following commands will be useful in particular: run and maybe dbg_wmx. The "show" command may leak interesting information too. Anyway, while the telnet interface may be of interest, the web interface will likely have its own share of vulnerabilities. For example, another model called SWC-9100 had some fairly serious vulnerabilities: www.exploit-db.com/exploits/39073/ www.exploit-db.com/exploits/39074/ Manufacturers typically rely on the same frameworks and developers whenever they design new models, so that means your SWU-9000 model could be vulnerable to the same type of exploit. If there's a firmware download available on the WiMax manufacturer website, then you could download that and inspect it with binwalk for example. Concerning your question about a multimeter, just try all the debug pins. Don't bother trying it out with the USB connector. For that you will need to design a custom USB cable which I'll hopefully get around to making a video about soon.
@damejelyas
@damejelyas 7 лет назад
man i used to laugh at your glasses now i get why you use them !!! for fucking protection damn !! they realy protect against the screen light
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
Lol :) I do have some other glasses that are actually made for using your computer screen at extended periods of time, but in this particular video I actually had studio light shining towards my face and the table, so that the quality would be better. If you have a very bright screen then a pair of glasses may help too, as extremely bright screen light will make your eyes tired quite fast. It also depends on the screen, my main monitor is quite pleasant to look at, my laptop monitor is also nice but not as good.
@CrazyDanishHacker
@CrazyDanishHacker 7 лет назад
If you're on-site at a client (i.e. a company) and you're forced to sit in a location where the sun shines directly into your eyes, then a pair of sunglasses will also work wonders. People might wonder why you're wearing sunglasses but a strong sun shining directly into your eyes while trying to look at a computer screen is also not ideal.
@damejelyas
@damejelyas 7 лет назад
i faced exately the problem of the sun shining directly at my face,and it is difficult to see the monitor and the eyes start hurting and getting red even while using glasses that are made to protect from computer light !!! but wearing those sun glases it feels very comfortable !!, especially those reflecting sun glasses!
@damejelyas
@damejelyas 7 лет назад
the first day i used it i felt the difference !!!
Далее
Raspberry Pi 4 Boot from USB
21:04
Просмотров 155 тыс.
3 Levels of WiFi Hacking
22:12
Просмотров 1,9 млн
Samsung UART - DEMO - Hardware Hacking Series #9
14:50
Hacking Hardware With A $10 SDCard Reader
41:39
Просмотров 19 тыс.