{"id":514,"date":"2010-05-19T11:25:39","date_gmt":"2010-05-19T03:25:39","guid":{"rendered":"http:\/\/www.kumouse.com\/?p=514"},"modified":"2010-05-19T11:25:39","modified_gmt":"2010-05-19T03:25:39","slug":"tomato-dualwan-%e5%81%9a-ssh-%e5%8a%a0%e5%af%86-%e4%bb%a3%e7%90%86","status":"publish","type":"post","link":"https:\/\/www.kumouse.com\/?p=514","title":{"rendered":"Tomato Dualwan \u505a SSH \u52a0\u5bc6 \u4ee3\u7406"},"content":{"rendered":"<p>\u5148\u6765\u8868\u8fbe\u4e00\u4e0b\u4e0d\u6ee1\uff0c\u6709\u7684\u5355\u4f4d\u7684\u7f51\u7ba1\u5c31\u662f\u5403\u591a\u4e86\u3002\u5c01\u8fd9\u4e2a\uff0c\u5c01\u90a3\u4e2a\uff0c\u6ca1\u4e8b\u627e\u4e8b\u3002\u6709\u672c\u4e8b\u4f60\u5c31\u522b\u5f00\u5916\u7f51\uff0c\u5f00\u4e86\u5916\u7f51\u603b\u662f\u6709\u529e\u6cd5\u7a7f\u900f\u7684\u3002\u5c31\u50cf\u67d0\u515a\u5f04\u7684\u7f51\u7edc\u957f\u57ce\u4e00\u6837\uff0c\u6709\u771f\u6b63\u957f\u57ce\u90a3\u4e48\u597d\u7528\u5417\uff1f\uff1f\uff1f\uff1f\uff01\uff01\uff01\uff01\uff01\uff01\uff01\uff01<\/p>\n<p>\u4e0b\u9762\u662f\u6b63\u9898\u3002<\/p>\n<p>\u867d\u8bf4TT\u5168\u529f\u80fd\u7248\u662f\u6709VPN\u670d\u52a1\u5668\u529f\u80fd\u7684\uff0c\u4f46\u662f\u5df2\u7ecf\u88ab\u5c01\uff0c\u7528\u4e0d\u4e86\uff0c\u56e0\u4e3a\u7aef\u53e3\u662f\u4e0d\u80fd\u53d8\u7684\u3002\u6240\u4ee5\u6709\u80fd\u7528SSH\u529f\u80fd\u4e86\u3002TT\u65e0\u6cd5\u5728\u7ba1\u7406WEB\u4e2d\u52a0\u5165\u591a\u4e2a\u7528\u6237\uff0c\u6240\u4ee5\u53ea\u80fd\u5230SHELL\u91cc\u64cd\u4f5c\u3002<\/p>\n<p>\u5148\u542f\u52a8WEB\u7ba1\u7406\u4e2d\u7684 \u7cfb\u7edf\u7ba1\u7406-&gt;JFFS2\u8bbe\u7f6e \u5f00\u542f \u5e76\u683c\u5f0f\u5316<\/p>\n<p>\u518d\u5230 \u7cfb\u7edf\u7ba1\u7406-&gt;\u8bbf\u95ee\u8bbe\u7f6e \u4e2d\u6539\u6389\u539f\u6765\u7684\u5bc6\u7801\u3002\u6539\u6210\u4f60\u60f3\u65b0\u5efa\u7acb\u7684\u7528\u6237\u4f7f\u7528\u7684\u5bc6\u7801(\u56e0\u4e3a\u5bc6\u7801\u5b58\u50a8\u662f\u52a0\u5bc6\u7684\uff0c\u6240\u4ee5\u8981\u5f97\u5230\u5bc6\u7801\u52a0\u5bc6\u540e\u7684\u7ed3\u679c)<\/p>\n<p>\u8fde\u63a5SSH \u952e\u5165\u547d\u4ee4 cat \/etc\/shadow<\/p>\n<blockquote>\n<p>root:$1$TFGPEA$g\/l3FMuNtLsgRjQLOA\/:0:0:99999:7:0:0:<br \/>\n\t\tadmin:$1$TFGPEA$g\/l3FMuNtLsgRjQLOA\/:0:0:99999:7:0:0:<br \/>\n\t\tnobody:*:0:0:99999:7:0:0:<br \/>\n\t\tnas:*:0:0:99999:7:0:0:<\/p>\n<\/blockquote>\n<p>\u590d\u5236\u7b2c\u4e00\u884croot: \u548c\u540e\u8fb9\u5192\u53f7\u4e4b\u95f4\u7684\u5b89\u7b26\u4e32\uff0c\u4e0d\u5305\u62ec\u524d\u540e\u7684\u5192\u53f7,\u8fd9\u65f6\u5c31\u662f$1$TFGPEA$g\/l3FMuNtLsgRjQLOA\/<br \/>\n\t\u7136\u540e\u5230 \u7cfb\u7edf\u7ba1\u7406-&gt;\u8bbf\u95ee\u8bbe\u7f6e \u628a\u5bc6\u7801\u518d\u6539\u56de\u539f\u6765\u7684<\/p>\n<p>\u7136\u540e\u590d\u5236\u5bc6\u7801\u6587\u4ef6\u5230\/jffs \u76ee\u5f55 cp \/etc\/shadow \/jffs\/shadow<\/p>\n<p>\u7f16\u8f91\u5bc6\u7801\u6587\u4ef6 vi \/jffs\/shadow \u5728\u6700\u4e0b\u8fb9\u4e00\u884c\u52a0\u5165ssh:$1$TFGPEA$g\/l3FMuNtLsgRjQLOA\/:0:0:99999:7:0:0:<\/p>\n<p>ssh\u540e\u8fb9\u7684\u5192\u53f7\u4e4b\u95f4\u662f\u521a\u624d\u8bb0\u4e0b\u6765\u7684\u5bc6\u7801.<\/p>\n<p>\u6700\u540e\u5c31\u662f\u5230 \u7cfb\u7edf\u7ba1\u7406-&gt;\u811a\u672c\u8bbe\u7f6e-&gt;\u5f00\u673a\u65f6 \u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9<\/p>\n<blockquote>\n<p>sleep 30<br \/>\n\t\techo ssh:x:101: &gt;&gt; \/etc\/group<br \/>\n\t\techo ssh:x:101:101:ssh:\/tmp\/home\/ssh:\/bin\/sh &gt;&gt; \/etc\/passwd<br \/>\n\t\tcp \/jffs\/shadow \/etc\/shadow<br \/>\n\t\tmkdir \/tmp\/home\/ssh<br \/>\n\t\tchown ssh:ssh \/tmp\/home\/ssh<\/p>\n<\/blockquote>\n<p>\u57fa\u672c\u4e0a\u5c31\u5b8c\u4e86\uff0c\u8def\u7531\u5f00\u542f\u540e30\u79d2\u4f1a\u81ea\u52a8\u5efa\u7acb\u65b0\u7528\u6237\u3002<\/p>\n<p>SSH\u4ee3\u7406\u7684\u597d\u5904\u662f\u52a0\u5bc6\uff0c\u6211\u5728\u8fd9\u4e2a\u8981\u4ee3\u7406\u7684\u670b\u53cb\u90a3\u91cc\u8bd5\u8fc7socks\u4ee3\u7406\uff0c\u7ed3\u679c\u662f\u7528\u4e0d\u4e86\uff0c\u5e94\u8be5\u8fdb\u884c\u4e86\u5305\u8fc7\u6ee4\u3002\u90a3\u53ef\u662f\u4e16\u754c500\u5f3a\u7684\u5355\u4f4d\u8bbe\u5907\u4e00\u5b9a\u662f\u4e0d\u4fd7.http\u66f4\u662f\u4e0d\u7528\u8bf4\u4e86\u3002SSH\u4ee5\u51fa\u8272\u7684\u52a0\u5bc6\u4f20\u8f93\u6253\u8d25\u4e86\u90a3\u8981\u6b7b\u7684\u8bbe\u5907\uff08\u5e94\u8be5\u662f\u4eba\uff09<\/p>\n<p>\u7f3a\u70b9:\u770b\u5230\u6700\u540e\u7684\u8bed\u53e5\uff0c\u53ef\u80fd\u6709\u4eba\u4f1a\u95ee\uff0c\u7ec4\u548c\u7528\u6237\u53ef\u4ee5\u7528echo\u6765\u52a0\u5165\uff0c\u5bc6\u7801\u4e3a\u4ec0\u4e48\u8981\u590d\u5236\u6587\u4ef6\u5462\u3002\u7b54\u6848\u662f\uff0c\u6211\u8bd5\u8fc7\u4e86\u5bc6\u7801\u7528\u91cd\u5b9a\u5411\u52a0\u5165\u5230\u6587\u4ef6\u4e2d\uff0c\u7ed3\u679c\u8fdb\u53bb\u4e00\u770b\uff0c\u662f\u4e0d\u5bf9\u7684\u3002\u6240\u4ee5\u7528\u4e86\u8fd9\u4e2a\u590d\u5236\u6587\u4ef6\u7684\u7b28\u65b9\u6cd5\u3002\u6240\u6709\u7528\u6237\u7684\u5bc6\u7801\u5168\u90fd\u5728\u8fd9\u91cc\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u4f60\u5728WEB\u7ba1\u7406\u9875\u6539\u4e86\u5bc6\u7801\uff0c\u5728\u6bcf\u6b21\u5f00\u673a30\u79d2\uff0c\u5c31\u4f1a\u53d8\u6210\u539f\u6765\u7684\u5bc6\u7801\uff08\u5c31\u662f\u8fd9\u4e2a\u6587\u4ef6\u91cc\u5199\u7684\uff09<\/p>\n<p>\u6700\u540e\u5230 \u7cfb\u7edf\u7ba1\u7406-&gt;\u8bbf\u95ee\u8bbe\u7f6e \u4e2d\u5f00\u542fSSH \u5e76\u5148\u53d6 \u4f7f\u7528\u5bc6\u7801\u767b\u9646 \u8bbe\u5b9a\u8fdc\u7a0b\u7aef\u53e3(\u6211\u7528\u768480,\u53ea\u8981\u80fd\u4e0a\u7f51\u7684\u5730\u65b9\uff0c\u5c31\u884c)&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5148\u6765\u8868\u8fbe\u4e00\u4e0b\u4e0d\u6ee1\uff0c\u6709\u7684\u5355\u4f4d\u7684\u7f51\u7ba1\u5c31\u662f\u5403\u591a\u4e86\u3002\u5c01\u8fd9\u4e2a\uff0c\u5c01\u90a3\u4e2a\uff0c\u6ca1\u4e8b\u627e\u4e8b\u3002\u6709\u672c\u4e8b\u4f60\u5c31\u522b\u5f00\u5916\u7f51\uff0c\u5f00\u4e86\u5916\u7f51\u603b\u662f\u6709\u529e\u6cd5\u7a7f [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-514","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.kumouse.com\/index.php?rest_route=\/wp\/v2\/posts\/514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kumouse.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kumouse.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kumouse.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kumouse.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=514"}],"version-history":[{"count":0,"href":"https:\/\/www.kumouse.com\/index.php?rest_route=\/wp\/v2\/posts\/514\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.kumouse.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kumouse.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kumouse.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}