Hacking la fonera… part III

BlaBla

La fonera, that fully tivo-ified (as rms would say :)) wifi accesspoint by fon was hacked two (now three:)) times, and it has always been patched very quickly.
The last one that was discovered here with a nice tutorial here,
was fixed on the 0.7.1 version of their firmware, but there is still a very similar hole in the webform still about unescaped evil characters…
Just replace “/usr/sbin/iptables -I INPUT 1 -p tcp –dport 22 -j ACCEPT” and “/etc/init.d/dropbear” in step1.html and step2.html with “$(/usr/sbin/iptables -I INPUT 1 -p tcp –dport 22 -j ACCEPT)” and “$(/etc/init.d/dropbear)”
Once done this follow the instructions of the last method straightforward…
Now, it will be surely fixed in the next version and you know what? I hope that it will be fixed, because it’s a very serious security problem, but it’s very sad that everything it’s becoming more and more broken by design, so pleeeeease fon, open that ssh by default and we will all looove you 🙂

13 thoughts on “Hacking la fonera… part III

  1. MiriamHodges

    If you’re in uncomfortable position and have no money to get out from that point, you would have to take the home loans. Just because that will aid you unquestionably. I get car loan every single year and feel myself great just because of that.

    Reply
  2. Jo21Gilmore

    This site is great for taking free trial tests!! All is perfect with your academic career when you determine the perfect writing company I recommend buy paper.

    Reply
  3. Free Essay

    Some people say check information of our costs right before ordering custom written essays in the custom essays writing firm. And some people must also get the superb texts referring to this good post over here.

    Reply
  4. Jubbi

    Wow, nice post,there are many person searching about that now they will find enough resources by your post.Thank you for sharing to us.Please one more post about that..

    Reply
  5. Monster turbine pro copper speaker headphone

    http://www.themonsterbeats.net/monster-beats-solo-hd-red-headphones-with-control-talk-p-194.html Monster beats solo hd with controltalk headphone

    http://www.themonsterbeats.net/monster-beats-solo-hd-black-headphones-with-control-talk-p-197.html Monster beats solo hd black headphone with control talk headphone

    http://www.themonsterbeats.net/lady-gaga-heartbeats-inear-headphones-red-p-209.html lady gaga hearbeats in ear headphone

    http://www.themonsterbeats.net/monster-beats-diddy-c-84.html Monster beats diddy headphone

    Reply

Comments are closed.