General NAS-Central Forums

Welcome to the NAS community
It is currently Sat Dec 16, 2017 9:06 am

All times are UTC




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: Iomega iConnect NAS
PostPosted: Sun Mar 28, 2010 2:04 am 
Offline

Joined: Sun Mar 28, 2010 2:00 am
Posts: 3
Anyone know of any modifications or can anyone point me in the right direction?


Last edited by tonyono on Sat Mar 26, 2011 5:07 am, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Tue May 25, 2010 3:25 am 
Offline

Joined: Sun Mar 28, 2010 2:00 am
Posts: 3
I still check this post, so if anyone has or obtains any information please share.


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Tue May 25, 2010 5:35 pm 
Offline

Joined: Tue May 25, 2010 5:32 pm
Posts: 2
I am also interested in the iConnect.

I thought it would be an obvious device to hack, but I haven't been able to find anyone doing it.


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Tue May 25, 2010 6:19 pm 
Offline

Joined: Mon Jun 16, 2008 10:45 am
Posts: 6091
Wrong attitude. Instead of searching for anyone doing it, you *could* have been searching for ways to do it.


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Thu May 27, 2010 4:36 am 
Offline

Joined: Sun Mar 28, 2010 2:00 am
Posts: 3
I have obtained the source code from the iomega website;
http://download.iomega.com/english/gpl/iconnect/iomegaiconnect-gpl-source-d31543400.zip

The extent I know of the firmware/software on the system is that it is Debian Linux software and utilizes TwonkyMedia manager as it's media handler. My networking and programming is limited but competent with direction or instruction.

Anyway, if anyone has any useful information that can point the small community of Iomega and smaller group of iConnect users in a direction of accessing and or manipulating the embedded software on the system it could be a start.

This is a consumer product so I think that the extent of network knowledge should be expected to be lower than most NAS users.

I am reaching out to find out some information on where to begin.


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Thu May 27, 2010 6:55 pm 
Offline

Joined: Mon Jun 16, 2008 10:45 am
Posts: 6091
The GPL sources are insufficient. There is no description how to compile them, there is no script which does it, ...
I downloaded the firmware (128MB, which is HUGE) but that didn't bring anything either. The file starts with Salted__, which means that strong encryption is used.
So for the moment only the default attackpoints remain.
- Do a portscan, and try to find out which services are listening.
- Open the box and see if you can find a serial port.
- Format an USB stick ext2, create a symlink to / on it, and look if you can follow the link via samba, nfs, ftp, ... . - Have a critically look at the webinterface. Try to guess which user supplied data is passed to a linux shell. When not enough checking is done on the user input this could be a way to execute your own code.
- Create a page on the wiki and share all collected information. Add photos of the PCB.
- Read the wiki pages of other iomega products. This product could have the same weaknesses.


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Sat May 29, 2010 8:30 pm 
Offline

Joined: Tue May 25, 2010 5:32 pm
Posts: 2
The serial port is J1. There is already a header mounted.

Pinout: (pin 1 is closest to the corner mounting hole)
1: 3.3V
2: TX
3: gnd
4: RX

This is a 3.3V port, so voltage conversion is required.

root password on serial console is same as some other iomega devices - add "soho" to the beginning of the admin password you set through the web interface.
For example, if admin password is "password", serial console password would be "sohopassword"


Top
 Profile  
 
 Post subject: Re: Iomega iConnect NAS
PostPosted: Sun Feb 13, 2011 11:28 pm 
Offline

Joined: Sun Feb 13, 2011 10:44 pm
Posts: 1
Location: Mt Umunhum, California, USA
linuxjacques wrote:
The serial port is J1. There is already a header mounted.

Pinout: (pin 1 is closest to the corner mounting hole)
1: 3.3V
2: TX
3: gnd
4: RX

This is a 3.3V port, so voltage conversion is required.

root password on serial console is same as some other iomega devices - add "soho" to the beginning of the admin password you set through the web interface.
For example, if admin password is "password", serial console password would be "sohopassword"

No need to open the box and void your warranty.

    Log in as admin, set your password.
    Open 'http://Your_Box-s_IP/support.html'
    Turn on ssh access.
    ssh into the box with a password of 'soho' plus password from first step

Once ssh access is enabled.

    vi /etc/passwd
    change root's home to /etc/root
    mkdir /etc/root
    mkdir /etc/root/.ssh
    create /etc/root/.ssh/authorized_keys
    Like so: cat < /etc/root/.ssh/authorized_keys and paste with id_rsa.pub from your computer
    Now you don't need to remember the password.

_________________
William Estrada
Mt Umunhum, CA, USA
HTTP://64.124.13.3 ( Mt-Umunhum-Wireless.net )
Skype: MrUmunhum


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group