General NAS-Central Forums

Welcome to the NAS community
It is currently Mon Mar 19, 2018 5:15 am

All times are UTC

Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: Tue Jul 06, 2010 9:37 pm 

Joined: Fri Mar 12, 2010 11:31 pm
Posts: 10
This is a tutorial for access via telnet to Plextor StorX PX-WNAS1000L with Firmware 1.02

We need:
    - An USB flash drive with a minimun of 2 Mb Free
    - 1 Beer


1.) Plug your USB flash drive in your Plextor StorX
2.) Open the USB flash drive as a share unit, for example in windows explorer type \\[your_plextor_ip]\P2_B_1
3.) Create a directory with the name webshell into the USB flash drive
4.) Uncompress the into the webshell directory
5.) Rename the uncompressed file webshell to webshell.cgi
6.) Access to your public share directory of your Plextor StorX (\\[you_plextor_ip]\public) and create a directory with the name "heineken"
7.) Access to the Plextor StorX control panel with firefox (http://[your_plextor_ip])
8.) In the control panel go to BackUp option
9.) Click on "Add a Backup Job"
10.) Select for backup source your USB flash drive (in my plextor is Local:P2_B_1), and next select the webshell directory
11.) Select for backup destination "Local:public"
12.) Open the firebug panel clicking in the firebug icon (You can find it in the right bottom corner of firefox). See the icon to click:Image
13.) Click on the Firebug Inspector Icon (You can find it in the top left corner of the Firebug panel). See the icon to click: Image
14.) Select the backup destination subdirectory selector (The box where you can read "-- Please select a subdirectory --")
15.) In the Firebug panel you can see the select field, now you must expand it clicking in the "plus" icon. See the select field expanded with the heineken directory:


16.) Change value "heineken" for "../../../../web" like the next picture:


17.) Close the Firebug panel
18.) Select the Heineken directory from the subdirectory selector (The box where you can read "-- Please select a subdirectory --")

Next you must see a screen like this:

19.) Now click in "Add" Button and you must see a screen like this:


20.) Click in the "Go" button and take your beer from the fridge or wait 10 seconds. After of this 10 seconds you can view the log clicking in the "VL" button.
21.) Now go to http://[your_plextor_ip]/BackUp/local/single/webshell/webshell.cgi?passwd -d root, and you the web browser must respond: "Password changed." :o

22.) Go to http://[your_plextor_ip]/BackUp/local/single/webshell/webshell.cgi?/usr/sbin/telnetd
24.) Now you can access to your plextor using telnet. You must use the name and password of a user previosly created in the control panel.
25.) Open and drink your beer.

The evidence:

- Is very important copy the webshell and rename it using your Plextor Storx with samba because internally when we rename the file samba change the group of the file. This group change is very important because thttpd now allow execute the webshell.cgi (Please follow the guidelines strictly).

- In the you can find also the source code programmed in C. Perhaps you can use it for other NAS system. I recommend use codesourcery for compile this code for other architecture. The webshell binary was compiled for arm-feroceon (-mtune=marvell-f). The code is a little dirty because I don't have enought time for make my code beauty.

- Perhaps you can view your external USB flash drive with other name as P2_B_2 or Port2_B_2, don't worry for this use this name.

- Becareful with with lower and uppercases, linux is case sensitive.

- Undertake this operations at your own risk!

PostPosted: Sat Nov 06, 2010 2:34 pm 

Joined: Sat Nov 06, 2010 9:36 am
Posts: 1
Thanks for a great guide!

Is it possible to get root access to the NAS? Either to telnet login as root, or to change to root after telnet login as a regular user.

I would like to have a look (and possibly change) some of the configuration files, etc.

I would also like to move some directories that I copied in via the backup function. However, I do not have ownership of them, so I cannot move without getting root access. The backup function has put the directories in a ./BackUp/local/single structure, I would just like the directories to be in ./

Thanking in advance.

PostPosted: Sat Jan 15, 2011 3:52 pm 
User avatar

Joined: Fri Jul 04, 2008 8:41 pm
Posts: 120
Nice... you should pop this in our wiki if you haven't already! Will sticky this.

PostPosted: Wed Feb 02, 2011 8:10 pm 

Joined: Wed Feb 02, 2011 8:08 pm
Posts: 1

I followed the guidelines, but at step 21 & 22, both Firefox and IE just offer to me to open/save the file "webshell.cgi" :-(

Any help please, many thanks in advance.

PostPosted: Thu Feb 03, 2011 9:20 am 

Joined: Mon Jun 16, 2008 10:45 am
Posts: 6179
igor wrote:
I followed the guidelines, but at step 21 & 22, both Firefox and IE just offer to me to open/save the file webshell.cgi" :-(
That doesn't matter. The code is executed because the NAS is asked to generate the webpage. It doesn't matter if you view the page in a browser, or save it on disk. Just save the file, and then open it in notepad. There should be "Password changed." inside.

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC

Who is online

Users browsing this forum: No registered users and 6 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group