|
发表于 2020-1-30 10:25:23
|
显示全部楼层
本帖最后由 yang1340751 于 2020-1-31 11:03 编辑 7 x# r5 U2 D3 t" H2 t |0 `
( n6 O7 c5 D' s" F6 \7 `5 e# }LZ,你好,我按照你的第一步操作,已经替换了/mnt/jffs2/hw_ctree.xml hw_ctree.xml
; S1 v/ F0 O6 P& l2 g1 R% H添加好SSH功能
7 N x1 ^ L2 o
1 u. s( b5 x3 N4 z- cd /tmp #进入/tmp目录) _9 D2 K) b5 U, ~- w9 L$ N
: } R% G0 {" x. Z8 q9 Q- cp /mnt/jffs2/hw_ctree.xml hw_ctree.xml.gz #复制/mnt/jffs2/hw_ctree.xml到/tmp目录并重命名为hw_ctree.xml.gz
7 P2 j: E3 |1 ]$ Z: L3 [& O
9 k# a- D/ ]% r6 i& _" m- aescrypt2 1 hw_ctree.xml.gz tmp #解密/tmp/hw_ctree.xml.gz
复制代码 结果如下
# \) O& R) q5 Y" ~+ D- WAP(Dopra Linux) # cp /mnt/jffs2/hw_ctree.xml /tmp/hw_ctree.xml.gz. q e Y4 O# F M
- WAP(Dopra Linux) # aescrypt2 1 hw_ctree.xml.gz tmp
9 b; {+ ]; }3 e7 t& e# s/ J - WAP(Dopra Linux) # gunzip hw_ctree.xml.gz7 D& T6 g$ \' S, C5 V
- WAP(Dopra Linux) # grep -i ssh /tmp/hw_ctree.xml
/ V: S1 X; l" Z; A/ d* N/ [ - <X_HW_CLISSHControl Enable="0" port="22" Mode="1" AluSSHAbility="0"/>/ T/ P7 G# j2 @5 S" ?( Z
- <AclServices HTTPLanEnable="1" HTTPWanEnable="0" FTPLanEnable="1" FTPWanEnable="0" TELNETLanEnable="1" TELNETWanEnable="0" SSHLanEnable="1" SSHWanEnable="0" SamBaLanEnable="1" SamBaWanEnable="0" HTTPPORT="80" FTPPORT="21" TELNETPORT="23" SSHPORT="22" WebPermanentCloseControl="0" HTTPWifiEnable="0" TELNETWifiEnable="0" WebAccessControl="1" TrustHost="">/ {, N. }9 X! B9 Z! n4 ?4 C% O
复制代码
. `# m% g& q/ k; o0 P% c进行第二步! l) @7 z2 e2 N+ _
- cd /tmp #进入/tmp目录
( g6 f- g/ b. }* [ - wget http://archive.openwrt.org/chaos_calmer/15.05.1/omap/generic/packages/base/dropbear_2015.67-1_omap.ipk #下载安装包
. M/ U+ I( ~. \ - tar xzf dropbear_2015.67-1_omap.ipk #解压安装包, H4 h+ M$ z+ y O) R. L/ j' S
- cd /opt/upt/apps/apps/ #进入 /opt/upt/apps/apps/目录. q ~" O/ ^. R7 }2 [
- tar xzf /tmp/data.tar.gz #解压data包,data包是解压ipk安装包后得到的
% O+ M. [2 J5 ] - mkdir etc/rc.d && cd etc/rc.d #新建/opt/upt/apps/apps/etc/rc.d文件夹并进入。
复制代码 然后退出到WAP模式+ f. y' m J! C/ ? B7 E a6 j! |
8 M& R! T8 E" W- e S* j% y- ' u3 L5 O6 A! U4 r
- WAP>ssh authentication-type mode 0 #设置为账号密码登陆模式* r9 p* Q' K* h( {) J
- success!
& l% K7 \- G! G" F3 [; p" d - WAP>save data #保存
3 M* f! g6 a7 v- l - success!
6 I; ]2 U4 l+ e% t3 Q - WAP>
- u s, \" b) N5 _
复制代码 % u2 i1 @' _- s/ r9 W" G
然后用ssh方式登陆,提示错误4 h% A! j- V$ y X
3 V( l1 y; B9 z9 {* l
- sshd listensocks[19]
R% ^ [9 [2 `- f8 V, r - ───────────────────────────────────────────────────────
5 F2 \ p& w, N) b - Session stopped
复制代码 已解决,是ssh工具的问题,用power shell登陆解决了。
$ Q: f! n3 ]7 p3 ^/ Y3 r3 [9 [" e6 e9 g
+ D3 U$ w6 n. i$ j; N9 P( B
疑问:/ E" C h9 l% X# R" W8 n5 e) a
第二步,好像没有将下载的dropbear替换掉原来的dropbear3 s: {: e+ K- s2 x' \, E! F: z
软连接也是连接原来的dropbear
0 L8 I& K6 t4 D5 T! l: p9 A1 j" Y- 下载 dropbear 的包,解压,放入正确的位置。
复制代码
7 B: {% G' G' r) ]1 u2 J% n9 q' {
! X( A; r! b: c+ D; _! B将dropbear放到/opt/upt/apps/apps/etc/init.d/重启后,SSH可以进入,查看dropbear进程
|- X6 b+ D4 p. ?& D: V8 r- WAP(Dopra Linux) # ps -w|grep dropbear& i" a" l& V# ?' C2 b
- 5501 root 1132 S dropbear -r /etc/dropbear/dropbear_rsa_host_key -p 22 -j -k
2 I& ^) h' a% x$ K$ V+ }4 |! V - 5559 root 1344 S grep dropbear
复制代码 确认为原来的dropbear,退出ssh,telnet登陆,然后kill掉dropbear之后,手动启动/opt/upt/apps/apps/etc/init.d/dropbear
4 A- y9 g( Z3 v5 d- c; u: {提示错误# l: K% k1 s9 U. V( q* {8 E
8 L' z# ]/ ]" S# Q4 I. {: ~
- kill掉原来的dropbear后,再查看dropbear进程,不存在该进程5 p3 b' K* N% |% z7 w [$ B
- WAP(Dopra Linux) # ps -w|grep dropbear
5 B5 }4 C) y# b8 L0 ~/ @5 m - 3390 root 1344 S grep dropbear: b% H/ V% u) L: I) C1 z& f
- j7 ~+ A% Q" Y' M% S0 I4 v$ I
% Y# g2 X3 G8 c2 H4 S; s
. b0 U6 p+ U- t* y7 _2 t# t' v* t
复制代码
5 B% ]! `1 l _# j G9 d( H+ C$ X, f8 B$ F3 \& z& V( {* a
8 a% L& Q8 B( Q/ z0 f
手动启动/opt/upt/apps/apps/etc/init.d/dropbear,无法启动
1 Y) Z0 f7 }3 L1 t3 i/ W提示无法打开/etc/rc.common,查看该文件不存在% v& ?) V. Z0 _+ X5 x
4 A' t1 ~# i; \7 A. V" `* O" F2 b- WAP(Dopra Linux) # pwd
! k7 b+ E& Q1 J+ w$ @* l+ x! q - /opt/upt/apps/apps/etc/init.d( r2 I' x6 I& h# }
- WAP(Dopra Linux) # ./dropbear -r /etc/dropbear/dropbear_rsa_host_key -p 22 -j -k4 _$ R* k4 t4 }- M; C
- /bin/sh: can't open '/etc/rc.common'
w1 A& D( R5 p9 y - WAP(Dopra Linux) # ls /etc/rc.common! J4 ^% a2 {4 q2 _8 I9 \7 ?
- ls: /etc/rc.common: No such file or directory. |$ D& ~3 f) Z- m
- WAP(Dopra Linux) #
复制代码 ' |. O9 P; q6 K% v [+ P
手动运行原来的dropbear正常$ d5 y' N, ?$ i( o( o+ K! t
- 手动运行原来的dropbear,成功
+ A ^) H0 y7 S2 e. J5 j! O - WAP(Dopra Linux) # dropbear -r /etc/dropbear/dropbear_rsa_host_key -p 22 -j -k: d/ `* {/ Y' v
# _, H0 K! e* _2 t- WAP(Dopra Linux) # ps -w|grep dropbear H9 f6 V; Z9 s$ r( A; n
- 5501 root 1132 S dropbear -r /etc/dropbear/dropbear_rsa_host_key -p 22 -j -k
) x# m4 j+ l6 A3 b2 d - 5559 root 1344 S grep dropbear
复制代码 : z0 a; X# i2 g+ ^
. S7 f% L/ v" J" F1 J7 S$ u7 Q& @
然后ssh登陆. t% h) u# H$ m! }# v" ?. x9 W0 H
- 用powershell登陆ssh
' ^, t0 Y. }7 J) B5 \1 [ - PS C:\Users\xxxx> ssh root@192.168.1.1
& \; Q3 f% m8 K# l" t) k' K) p - root@192.168.1.1's password:, I( M0 {2 g1 W' K- m
6 M( g6 z4 w7 W- WAP>su( b$ R- g; e5 Z- a# P
- success!* m9 F! ?' n5 l2 t& u1 F/ f, h
- SU_WAP>shell
8 J6 J Z3 b% L2 b X
5 P1 D5 y; E9 ]7 q- BusyBox v1.18.4 (2017-08-16 10:43:34 CST) built-in shell (ash)
0 p+ C+ ~3 c9 |" F* {. B- x0 i4 A - Enter 'help' for a list of built-in commands.& {- ]4 R1 O: W0 O
- : ^: A5 K$ e$ R Z% b5 b9 _4 b% a0 d
- profile close core dump
/ q- T. O4 `3 A# k/ c1 H7 t - WAP(Dopra Linux) # su6 e! U8 u7 P0 D9 z& e, e
- Password:5 X' F, _- ?2 w8 v7 {8 R
7 v2 q" x% E! ?% G
/ w! c4 V; [; P [6 a/ d0 d- BusyBox v1.18.4 (2017-08-16 10:43:34 CST) built-in shell (ash)
( E: q0 O) j1 O9 p: q$ K5 p( J - Enter 'help' for a list of built-in commands.( w- j' r& k) D- f8 }
- l, o( U0 f8 R+ O" k! u r
- WAP(Dopra Linux) # ps -w|grep dropbear1 M, s! K3 M0 R" I( C1 Q
- 5501 root 1132 S dropbear -r /etc/dropbear/dropbear_rsa_host_key -p 22 -j -k
复制代码 再次手动启动替换后的dropbear,仍然不成功
D @5 y- t: o" F! Z
9 u1 z/ d/ J3 l" s- WAP(Dopra Linux) # pwd* c) w( r7 H8 d7 \1 Q0 ~9 S- U
- /opt/upt/apps/apps/etc/init.d
: G, J P% l! a - ( p2 }3 R& v. m6 y
- WAP(Dopra Linux) # ls
, Q7 A; U5 _# \7 `% @ - S50dropbear dropbear
( a0 X ^/ U/ d2 ?3 q - WAP(Dopra Linux) # dropbear
9 @+ k1 e! f! z% H) d/ W3 N - cp: can't stat '/etc/dropbear/dropbear_dss_host_key': No such file or directory
% m! ]* P7 o, q* A# i" b% ^% R$ c; W - <hw_ssp_ctool.c:587>file (/tmp/sshd_de_aes_tmp) open failed, errno (2)
* r2 J2 ~6 U8 l; |2 m* C6 S4 a, y; C - [svr-runopts.c_460]
- N1 j/ u; Y* ?, L/ q- o7 d3 D, b9 Y - cp: can't stat '/etc/dropbear/dropbear_ecdsa_host_key': No such file or directory8 @, z; @: @6 s1 J9 v& G A
- <hw_ssp_ctool.c:587>file (/tmp/sshd_de_aes_tmp) open failed, errno (2)! q @ _. o6 c7 R8 A2 G
- [svr-runopts.c_460]
& E; g3 X6 [3 N - 8 g3 b% e2 ^9 n1 w% O
- 没dropbear_dss_host_key和dropbear_ecdsa_host_key,想手动创建一个,但是提示文件夹自读
) h9 O9 g: w4 a3 h* c3 s$ F( d - WAP(Dopra Linux) # cd /etc/dropbear/
7 W; o7 d$ ], F) }, d - WAP(Dopra Linux) # ls -l
& s& R3 ]2 p6 `0 s3 H0 i) x - -rwxr-xr-x 1 root root 872 Aug 16 2017 dropbear_rsa_host_key, U0 i) h5 Q' S) _
- WAP(Dopra Linux) # cp dropbear_rsa_host_key dropbear_dss_host_key) `7 v/ _/ L6 Z' o8 B
- cp: can't create 'dropbear_dss_host_key': Read-only file system
: l8 h, i* |; K* V9 F - ( S. Y3 N7 k$ Z2 c- T$ Y5 O
- 查看dropbear目录又是root可写的,
, n$ V7 m1 l" |6 Z* C - WAP(Dopra Linux) # ls -l |grep dropbear8 l' D2 D% X m
- drwxr-xr-x 2 root root 44 Aug 16 2017 dropbear% W4 j& {" h8 T+ `, i
- WAP(Dopra Linux) # whoami
9 m& Y- g& F% F) x - root
复制代码 - T2 B' n( r2 O, [+ G& L; V) u( T
8 A8 I% d: U9 e$ ~. L已解决,是我设置的软连接错误,正确的连接如下
) B/ u( p5 _8 u- WAP(Dopra Linux) # pwd
" z2 s; l* U4 k6 [# W - /opt/upt/apps/apps/etc/rc.d
, O* J/ Q0 p5 F0 c+ F, R6 [ - WAP(Dopra Linux) # ls -l9 [4 D0 H6 z9 x; B! D6 O8 B4 I1 n
- lrwxrwxrwx 1 root root 18 Jan 30 15:07 S50dropbear -> ../init.d/dropbear
复制代码
0 X e# A2 W( G0 b: l0 V a s9 A k' N5 v
T# [! X- K, u3 y% H+ {
7 w+ K% c3 O' h. d- T1 [& V
' `# R- Y7 R, N) l, i
5 q* ^( T: | a; b$ D3 x g+ F
( M- h5 C$ [% A% X5 Z* h' l/ I
! c2 B4 ?# q) g8 a8 W3 c
2 y g2 r2 b- H- D8 {$ m) a
P3 [6 n+ W/ I2 q6 ?& X5 S! J+ E1 J$ b2 J
/ @8 h0 [/ u3 R& T
7 Q! k. [/ ]0 U, _' J, r2 |' Y5 }* K
9 z7 `0 K ^ e. |1 l. p' ` ^. k2 }9 ~
; W( O" _) _! {9 H* ~7 J, z. B" k; n
! m/ x% Q% w% i% N$ h1 N+ q( e4 e1 A4 A7 M0 M
( X( [" z* k+ l) W0 v1 B: O2 J" ^; U- J8 ~4 F2 p5 u
- A( Z2 y( N. m6 B8 S
$ z# e% ~# L y
1 N! E" c* J# g+ N% h% Z, Q! O( j |
本帖子中包含更多资源
您需要 登录 才可以下载或查看,没有账号?注册
×
|