EDmini home webshell problems

Ethernet disk mini & Ethernet disk mini home edition
Post Reply
cbfreder
Posts: 1
Joined: Thu Aug 14, 2008 12:36 am

EDmini home webshell problems

Post by cbfreder » Thu Aug 14, 2008 12:46 am

I accidentally bought the EDmini home instead of the regular version, but I am trying to get the hack going anyway. I opened her up and found that instead of the web root being /var/www it was in /var/www/html/html according to /etc/httpd/conf/httpd.conf. I put an eval script according to sources that I'd found on the wed in /var/www/html/html/hole with owner root and permissions 755 (although the second html directory initially had permissions 750). I can get to the file from my browser but the problem is that it just downloads it and does not actually execute the script. Sorry about the newbie status of this question, but what am I missing?

brandon

evanichka
Posts: 1
Joined: Tue Sep 02, 2008 5:29 pm

Re: EDmini home webshell problems

Post by evanichka » Tue Sep 02, 2008 5:34 pm

i also have an EDmini and have been unsuccesful with getting the hack working.

for your problem, you have to edit the httpd.conf file to allow scripts to run. for example, try to rename the hole to hole.cgi and try to run that, you'll get an error saying that you don't have permission to execute scripts.

HOWEVER, even if you edit the httpd.conf file in the first partition (sdc1 for me), everytime you boot up the EDmini, it reverts back to the old httpd.conf. Which is weird, since I don't know where the original httpd.conf is being reloaded from... there is not /etc/httpd in the seventh partition (sdc7 for me). I feel like once I know where the original httpd.conf is stored and then copied, it shouldn't be that hard to enable cgi scripts to run...

anyone have any ideas on this?

iurly
Posts: 3
Joined: Wed Jan 14, 2009 1:30 am

Re: EDmini home webshell problems

Post by iurly » Wed Jan 14, 2009 1:53 am

Hi guys,

when you opened the box, did you take a look at what's inside?
Does it compare to what's inside the EDmini v2:
http://img524.imageshack.us/my.php?imag ... mpogk5.jpg
http://lacie.nas-central.org/wiki/Category:EDmini_v2

Or does it look more like the original EDmini:
http://lacie.nas-central.org/wiki/Category:EDmini

You didn't try asking around for images of the EDminiv2 hard drive to overwrite the existing partitions, now did you?

Thank you and happy hacking!

giarrettu
Posts: 16
Joined: Tue Jun 17, 2008 8:34 am

Re: EDmini home webshell problems

Post by giarrettu » Wed Feb 11, 2009 11:19 am

Hello,

I have a edmini home edition with axentraserver (hiperserv) software on it. In my edmini the sshd deamon was already up and running. I realized that after an ssh on it.
In order to have the ssh access on your edmin home edition you have to disassemble the edmini plug the HD on your linux box and modify the /etc/ssh/sshd_config to enable no password for the user root. furthermore I modified the /etc/shadow file.

the original line for root user into the file /etc/shadow was like this

:root:$1$ÐQEXe5ÀJ$Jffvxi5UaGHpaMckCsKH0:11628:0:99999:7:::

I modified it into ":root:!!:11628:0:99999:7:::

in this way you can ssh on your edmini home edition.

Giarrettu

Post Reply