Iomega iConnect NAS

Iomega iConnect Wireless Data Station
Post Reply
tonyono
Posts: 3
Joined: Sun Mar 28, 2010 2:00 am

Iomega iConnect NAS

Post by tonyono » Sun Mar 28, 2010 2:04 am

Anyone know of any modifications or can anyone point me in the right direction?
Last edited by tonyono on Sat Mar 26, 2011 5:07 am, edited 1 time in total.

tonyono
Posts: 3
Joined: Sun Mar 28, 2010 2:00 am

Re: Iomega iConnect NAS

Post by tonyono » Tue May 25, 2010 3:25 am

I still check this post, so if anyone has or obtains any information please share.

linuxjacques
Posts: 2
Joined: Tue May 25, 2010 5:32 pm

Re: Iomega iConnect NAS

Post by linuxjacques » Tue May 25, 2010 5:35 pm

I am also interested in the iConnect.

I thought it would be an obvious device to hack, but I haven't been able to find anyone doing it.

Mijzelf
Posts: 6251
Joined: Mon Jun 16, 2008 10:45 am

Re: Iomega iConnect NAS

Post by Mijzelf » Tue May 25, 2010 6:19 pm

Wrong attitude. Instead of searching for anyone doing it, you *could* have been searching for ways to do it.

tonyono
Posts: 3
Joined: Sun Mar 28, 2010 2:00 am

Re: Iomega iConnect NAS

Post by tonyono » Thu May 27, 2010 4:36 am

I have obtained the source code from the iomega website;
http://download.iomega.com/english/gpl/ ... 543400.zip

The extent I know of the firmware/software on the system is that it is Debian Linux software and utilizes TwonkyMedia manager as it's media handler. My networking and programming is limited but competent with direction or instruction.

Anyway, if anyone has any useful information that can point the small community of Iomega and smaller group of iConnect users in a direction of accessing and or manipulating the embedded software on the system it could be a start.

This is a consumer product so I think that the extent of network knowledge should be expected to be lower than most NAS users.

I am reaching out to find out some information on where to begin.

Mijzelf
Posts: 6251
Joined: Mon Jun 16, 2008 10:45 am

Re: Iomega iConnect NAS

Post by Mijzelf » Thu May 27, 2010 6:55 pm

The GPL sources are insufficient. There is no description how to compile them, there is no script which does it, ...
I downloaded the firmware (128MB, which is HUGE) but that didn't bring anything either. The file starts with Salted__, which means that strong encryption is used.
So for the moment only the default attackpoints remain.
- Do a portscan, and try to find out which services are listening.
- Open the box and see if you can find a serial port.
- Format an USB stick ext2, create a symlink to / on it, and look if you can follow the link via samba, nfs, ftp, ... . - Have a critically look at the webinterface. Try to guess which user supplied data is passed to a linux shell. When not enough checking is done on the user input this could be a way to execute your own code.
- Create a page on the wiki and share all collected information. Add photos of the PCB.
- Read the wiki pages of other iomega products. This product could have the same weaknesses.

linuxjacques
Posts: 2
Joined: Tue May 25, 2010 5:32 pm

Re: Iomega iConnect NAS

Post by linuxjacques » Sat May 29, 2010 8:30 pm

The serial port is J1. There is already a header mounted.

Pinout: (pin 1 is closest to the corner mounting hole)
1: 3.3V
2: TX
3: gnd
4: RX

This is a 3.3V port, so voltage conversion is required.

root password on serial console is same as some other iomega devices - add "soho" to the beginning of the admin password you set through the web interface.
For example, if admin password is "password", serial console password would be "sohopassword"

MrUmunhum
Posts: 1
Joined: Sun Feb 13, 2011 10:44 pm
Location: Mt Umunhum, California, USA

Re: Iomega iConnect NAS

Post by MrUmunhum » Sun Feb 13, 2011 11:28 pm

linuxjacques wrote:The serial port is J1. There is already a header mounted.

Pinout: (pin 1 is closest to the corner mounting hole)
1: 3.3V
2: TX
3: gnd
4: RX

This is a 3.3V port, so voltage conversion is required.

root password on serial console is same as some other iomega devices - add "soho" to the beginning of the admin password you set through the web interface.
For example, if admin password is "password", serial console password would be "sohopassword"
No need to open the box and void your warranty.
  • Log in as admin, set your password.
    Open 'http://Your_Box-s_IP/support.html'
    Turn on ssh access.
    ssh into the box with a password of 'soho' plus password from first step
Once ssh access is enabled.
  • vi /etc/passwd
    change root's home to /etc/root
    mkdir /etc/root
    mkdir /etc/root/.ssh
    create /etc/root/.ssh/authorized_keys
    Like so: cat < /etc/root/.ssh/authorized_keys and paste with id_rsa.pub from your computer
    Now you don't need to remember the password.
William Estrada
Mt Umunhum, CA, USA
HTTP://64.124.13.3 ( Mt-Umunhum-Wireless.net )
Skype: MrUmunhum

Post Reply