"Inloggen" op een Samsung smt 6010e settop box

[Anoniem: 262236]

Hallo,

Ik heb recent bij een 2dehandswinkel een werkende (Versatel branded) samsung smt-6010e settop box voor digitale televisie gekocht.

Volgens de Samsung site draait het beestje linux, is er voorzien in een 300Mhz cpu, 128MB ram , een 32MB DOM voor linux en 2MB flash voor een "bootrom". en niet te vergeten 2x usb en een netwerk aansluiting.

Aan de software kant schijnt er support te zijn voor mpeg2/4 video streaming, dus Ik kreeg spontaan visioenen van een fanloze streaming box voor content vanaf de "werkkamer -Imac" over het netwerk naar de mega tv in de woonkamer, maar ik vrees dat mijn linux skills te kort gaan schieten

Ik kom niet ver, maar heb al wel het volgende ontdekt:
Samsung Box ondersteund dhcp : vraagt en krijgt ip adres van mijn router.
Samsung Box klaagt dat "pagina niet gevonden kan worden"

Dus mijn vraag is: hoe kom ik erachter welke "services" er draaien om in te loggen (telnet?) of hoe mount ik onder osx de dom?

[TrailBlazer]

je kan gewoon die doos nmappen dat is toch wel de standaard methode om snel te kijken welke poorten er open staan. Zoek dus even op de tool nmap. Overigens als je dit soort basic dingen niet weet dan wordt het hacken wel een heel lastige klus.

[Voor 36% gewijzigd door TrailBlazer op 18-05-2008 17:43]

[Anoniem: 267762]

Hallo,

Ook ik had dat soort ideeen voor ogen, maar dat hield inderdaad snel op.
Ben zelf wel wat verder gekomen.
Via de UTP is er alleen poort 21 open, waar ik niks mee kan.
Maar wat interessanter is, is dat als je hem open maakt, je er een terminal sessie op kan aansluiten op J7, daar zit gewoon Rx Tx op (wel op 3.3v niveau dus niet direct aan je compoort hangen) snelheid instellen op 115200
Maar kom daar ook niet veel verder, je ziet dan wel dat het inderdaad linux is, maar ja heb al een uur zitten gokken wat de root password is, maar dat lijkt mij onbegonnen werk.
Hier dan de listing die te zien krijgt als je hem opstart:

Success1 registering the Video DAC devices for board: 1300, daughter board: 0
Success2 registering the Video DAC devices for board: 1300, daughter board: 0
Success3 registering the Video DAC devices for board: 1300, daughter board: 0
[cyg_net_init] Init: mbinit(0x00000000)
[cyg_net_init] Init: cyg_net_init_devs(0x00000000)
Init device 'rltk8139_eth0'
[cyg_net_init] Init: loopattach(0x00000000)
[cyg_net_init] Init: ifinit(0x00000000)
[cyg_net_init] Init: domaininit(0x00000000)
[cyg_net_init] Init: cyg_net_add_domain(0x803afae0)
New domain internet at 0x00000000
[cyg_net_init] Init: cyg_net_add_domain(0x803aea60)
New domain route at 0x00000000
[cyg_net_init] Init: call_route_init(0x00000000)
[cyg_net_init] Done
*************************
* Bootrom Version *
* V_STB_BT_01_02_050418 *
*************************
pciVIAInit
imageDisplay
Display Refresh Video Output example.
etiDefaultMemPool 0x87efc000 , start 0x80000000 size 0x8000000 hiMemGap 0x104000
xOffset 80 yOffset 48 dstBytesPerPixel 2 imageBmpWidth 640
CXA2161R status : d8
CXA2161R status : d8
Press <CANCEL> remote key to start net booting....
hmpv_read_fcnt
start time in 23e718b6 cycles
Doc Booting....
flRegisterSAFTL: start
flRegisterSAFTL: end
Media Size = 32 Mbytes

Note: Searching for the media header.
As a result a few H/W protection error messages might be reported.

ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.

Note: header was found - end of media header search.

DALN: PC=0x8009938c, RP=0x800ff560, addr=0x80a19f39: 2 byte load r60
START WITH BANK0
imageversion : 0
START TIME : 268fc4bb
bdkReadBlock has Completed Succefully
CheckSignature returned 0, nds signature passed
END TIME : a8cb78a8
Read done in 84f55cf3 cycles
Start Booting.... address from [82517820]
00:0a:0 Class 0200: 10ec:8139 0:0x1000[256]I 1:0x10000000[256]M IRQ 9
00:0c:0 Class 0601: 1106:0686
00:0c:1 Class 0101: 1106:0571 4:0x1100[16]I
00:0c:2 Class 0c03: 1106:3038 4:0x1120[32]I IRQ 16
00:0c:4 Class 0000: 1106:3057
pciDolphinFixup: 10ec:8139 IRQ pin A-->B IRQ 10
pciDolphinFixup: 1106:3038 VIA device: IRQ 42 (i8259 IRQ 5)
Linux version 2.2.20 (root@bora) (ecc version v6.0_6127) #1 Tue Feb 28 13:34:49 KST 2006
CPU frequency: 297 MHz
Mem frequency: 118 MHz
Calibrating delay loop... 296.55 BogoMIPS
Memory: 93072k/130032k available (2736k kernel code, 1056k data, 400k reserved)
Dentry hash table entries: 16384 (order 3, 128k)
Buffer cache hash table entries: 524288 (order 7, 2048k)
Page cache hash table entries: 8192 (order 1, 32k)
POSIX conformance testing by UNIFIX
PCI: Probing PCI hardware
Linux NET4.0 for Linux 2.2
Based upon Swansea University Computer Society NET3.039
NET4: Unix domain sockets 1.0 for Linux NET4.0.
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
TCP: Hash tables configured (ehash 524288 bhash 65536)
Serial driver version 4.27 with no serial options enabled
ttyS00 at 0x03f8 (irq = 41) is a 16550A
ttyS01 at 0x02f8 (irq = 40) is a 16550A
pty: 256 Unix98 ptys configured
RAM disk driver initialized: 16 RAM disks of 32768K size
RAMDISK: ext2 filesystem found at block 0
RAMDISK: Loading 32768 blocks [1 disk] into ram disk... done.
usb.c: registered new driver usbdevfs
usb.c: registered new driver hub
usb.c: registered new driver hid
mice: PS/2 mouse device common for all mice
usb-uhci.c: $Revision: 1.2 $ time 13:35:37 Feb 28 2006
usb-uhci.c: High bandwidth mode enabled
usb-uhci.c: USB UHCI at I/O 0x1120, IRQ 42
usb-uhci.c: Detected 2 ports
usb.c: new USB bus registered, assigned bus number 1
usb.c: USB new device connect, assigned device number 1
Product: USB UHCI Root Hub
SerialNumber: 1120
hub.c: USB hub found
hub.c: 2 ports detected
VFS: Mounted root (ext2 filesystem).
Freeing unused kernel memory: 128k freed
Using /lib/modules/2.2.20/block/doc.o
fl: TrueFFS driver 621.41
flRegisterComponents: fFound:01
fl: 1 device(s) found
fl: Registered module at major 62
Partition check:
fla: fla1
fl: Device 0x0 size 0x1028000 sectors 0x8140
fl: partition 0x1 size 0x1024c00
fla: fla1
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
EXT2-fs error (device fl(62,1)): ext2_check_blocks_bitmap: Wrong free blocks count for group 0, stored = 2825, counted = 2826
EXT2-fs error (device fl(62,1)): ext2_check_blocks_bitmap: Wrong free blocks count in super block, stored = 10754, counted = 10755
EXT2-fs error (device fl(62,1)): ext2_check_inodes_bitmap: Wrong free inodes count in group 0, stored = 2043, counted = 2044
EXT2-fs error (device fl(62,1)): ext2_check_inodes_bitmap: Wrong free inodes count in super block, stored = 4115, counted = 4116
grep: /var/run/rc.pids: No such file or directory
test: 0: unknown operand
ifconfig: face: error fetching interface information: Device not found

Using /lib/modules/2.2.20/8139too.o
PCI: Increasing latency timer of device 00:50 to 64
eth0: 8139too Fast Ethernet driver 0.9.18-2.2
eth0: Samsung Electronics SMT-6000E, YSU v1.2 <[e-mail]>
eth0: RealTek RTL8139 Fast Ethernet board found at 0x1000, IRQ 10
eth0: Chip is 'RTL-8139C' - MAC address '00:00:f0:f0:6a:18'.
ifconfig: face: error fetching interface information: Device not found

60: old priority 0, new priority 7
eth0: Setting 100mbps full-duplex based on auto-negotiated partner ability 45e1.
Using /lib/modules/2.2.20/saa7128/saa7128.o
Loading Saa7128 Color Bar Test Module
Saa7128color: Device registered with Major Number = 0
Using /lib/modules/2.2.20/saa7128/cxa2161r.o
Loading Cxa2161r Scart Switch Test Module
Cxa2161rScart: Device registered with Major Number = 0
Using /lib/modules/2.2.20/cs4341/cs4341Control.o
insmod: unresolved symbol prinfLinkNewDriver
umount: /proc/bus/usb: Invalid argument
rm: cannot remove `/wfs/run': No such file or directory
Login: Received cs4341 mute command
cs4341Control_k.c: Error raised during driver call
-> Error 6 by library Iic : file /usr/local/Equator/v6.0/tools/source/libdev/iic/mask.c, line 331 (failed: ack == 0)
-> Error 6 by library Iic : file /usr/local/Equator/v6.0/tools/source/libdev/iic/mask.c, line 387 (failed: rcvAck(context))
-> Error 6 by library Iic : file /usr/local/Equator/v6.0/tools/source/libdev/iic/mask.c, line 503 (failed: sendAddr(context,slave))
-> Error 6 by library Iic : file /usr/local/Equator/v6.0/tools/source/libdev/iic/mask.c, line 704 (failed: send(maskContext,slave,data,size))
-> Error 6 by library Iic : file /usr/local/Equator/v6.0/tools/source/libdev/iic/etiIic.c, line 237 (failed: iicMaskSend(handle,slave,data,size))
-> Error 8 by library cs4341Control : file control.c, line 211 (failed: iicSend(instance->handle,0x22,cs4341muteon,sizeof(cs4341muteon)))
Saa7128color : Device Open (254, 0)
Saa7128color: Opened Value 0
Cxa2161rScart : Device Open (252, 0)
Cxa2161rScart: Opened Value 0

I2C_ADDR - DATA1, DATA2, DATA3, DATA4, DATA5, DATA6, DATA7
[90] 86 , 82, 00 , 3a , 02 , 4b , ef
Success1 registering the Video DAC devices for board: 1300, daughter board: 0
Success2 registering the Video DAC devices for board: 1300, daughter board: 0
Success3 registering the Video DAC devices for board: 1300, daughter board: 0
Jump starting VLX processor In 6.0 mode.
Vlx processor started successfully (vlxStatus 0x2).
IIS audclk = 1
audclk = 1
DrcDrv: Output -> PAL Interlaced 720 x 576 @ 25Hz

Primary input: Enabled
Secondary input: Enabled
Graphics input: Enabled
gfxFormat: 800
alphaStream: 0
Update server not reached

Login: root
Password:
Login incorrect
Login: root
Password:
Login incorrect
Login: root
Password:
Login incorrect
login[1241]: invalid password for `root' on `/dev/ttyS0'

Login:

[Anoniem: 267762]

Grappig is dat de USB poorten ook nog werken, usbstick/keyb/muis word gewoon herkend, alleen functioneerd het niet ;-(

usb.c: USB new device connect, assigned device number 2
Manufacturer: CHICONY
Product: Compaq USB Keyboard
event0: Event device for input0
input0: USB HID v1.10 Keyboard [CHICONY Compaq USB Keyboard] on usb1:2.0
event1: Event device for input1
input1: USB HID v1.10 Device [CHICONY Compaq USB Keyboard] on usb1:2.1

hub.c: USB new device connect on bus1/2, assigned device number 3
usb.c: USB new device connect, assigned device number 3
Manufacturer: Logitech
Product: USB-PS/2 Optical Mouse
mouse0: PS/2 mouse device for input0
event0: Event device for input0
input0: USB HID v1.10 Mouse [Logitech USB-PS/2 Optical Mouse] on usb1:3.0

[oddish2211]

het is een oud topic, kweet het.
ik heb ook zo'n apparaat gekregen, stond bij iemand te verstoffen.

als ik bij het opstarten op exit druk dan krijg ik andere berichten, hij probeert een bootimage te verkrijgen over het netwerk.

code:

Success1 registering the  Video DAC devices for board: 1300, daughter board: 0
Success2 registering the  Video DAC devices for board: 1300, daughter board: 0
Success3 registering the  Video DAC devices for board: 1300, daughter board: 0
[cyg_net_init] Init: mbinit(0x00000000)
[cyg_net_init] Init: cyg_net_init_devs(0x00000000)
Init device 'rltk8139_eth0'
[cyg_net_init] Init: loopattach(0x00000000)
[cyg_net_init] Init: ifinit(0x00000000)
[cyg_net_init] Init: domaininit(0x00000000)
[cyg_net_init] Init: cyg_net_add_domain(0x803afae0)
New domain internet at 0x00000000
[cyg_net_init] Init: cyg_net_add_domain(0x803aea60)
New domain route at 0x00000000
[cyg_net_init] Init: call_route_init(0x00000000)
[cyg_net_init] Done
*************************
* Bootrom Version       *
* V_STB_BT_01_02_050418 *
*************************
pciVIAInit
imageDisplay
Display Refresh Video Output example.
etiDefaultMemPool 0x87efc000 , start 0x80000000 size 0x8000000 hiMemGap 0x104000
xOffset 80 yOffset 48 dstBytesPerPixel 2 imageBmpWidth 640
CXA2161R status : d8
CXA2161R status : d8
Press <CANCEL> remote key to start net booting....
hmpv_read_fcnt
start time in 171654fb cycles
flRegisterSAFTL: start
flRegisterSAFTL: end

Note: Searching for the media header.
      As a result a few H/W protection error messages might be reported.

ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.
ERROR in read_Seq: M512_checkAndFixAccessError:Protection error occurred.

Note: header was found - end of media header search.

Get IP from DOC *************************
Mode (DHCP, STATIC) : DHCP
IP address          : 165.213.153.93
Gateway             : 165.213.153.1
Netmask             : 255.255.255.0
FTP server ip       : 000.000.000.000
User ID             : fttc
Password            : cassis
Directory           : download
Net Booting....
Try to receive bootimage through ip network!
Start my_init_net()
my_init_net: STB IP(165.213.153.93)
my_init_net: STB Netmask(255.255.255.0)
my_init_net: STB GW(165.213.153.1)
my_init_net End!FTP Connect to 0.0.0.0 failed: Connection refused
FAIL to receive Boot image: -3
loadImageFromNet: FTP down error!
Read done in 4fcb0ea cycles
Start Booting.... eti_dummy_cl_handler(): cl=0, cesr[masked]=0x00000001
 current interrupt nesting level = 1
 ___bspregNMIs=0x00000000
DTLB miss at PC=0x8009c044, vaddr=0x0000000c (cluster 0)
Asid Virtual  --> Physical Size Flags                DTS
   0 80000000 --> 40000000 256M  V  S  R       KW  C SDRAM
   0 ffc00000 --> ffc00000   4M  V  S  R       KW UC   PIO
   0 000d0000 --> 000d0000  64K  V  S  R       KW UC  PCIA
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
 NOT VALID
excTraceDump(): Exception Tracing disabled.

========= Exception Context at 0x809ae900 =========

 psw  = 0x000200f0    pse= 0x00000000

 epcr = (0x8009c044, 0x8009c048, 0x8009c04c)

 preg    = (0x00001822, 0x00001822)
 ccr     = (0x000000ef, 0x000000ef)
 cpse    = (0x00000000, 0x00000000)
 mstat0  = (0x900004c0, 0x80000d4c)
 mstat1  = (0x800004fa, 0x8000036c)
 mstat2  = (0x800004c0, 0x80000680)
 mvadr0  = (0x0000000c, 0xffc00ab0)
 mvadr1  = (0x000d0c10, 0xffc00814)
 mvadr2  = (0x000d0c28, 0xffc00bf0)
 mstdtl0 = (0x000003f9, 0x800a093c)
 mstdtl1 = (0x80a26950, 0x800a093c)
 mstdtl2 = (0x000000ff, 0x00000020)
 mstdth0 = (0x0f00145f, 0x0000005f)
 mstdth1 = (0x32a00357, 0x0000005f)
 mstdth2 = (0x00000000, 0x0000000d)

 r00 = (0x00000000, 0x00000000)
 r01 = (0x00000000, 0x00000000)
 r02 = (0x00000000, 0x00000000)
 r03 = (0x809a4ce0, 0x809a4ce0)
 r04 = (0x803b26d3, 0x22462c0a)
 r05 = (0x00000004, 0xe6db99e5)
 r06 = (0x8062c7c8, 0xbcf0c74f)
 r07 = (0x00000004, 0x1fa27cf8)
 r08 = (0x00000000, 0xd8a1e681)
 r09 = (0x00000000, 0x07f951ad)
 r10 = (0x00000000, 0xc0376c20)
 r11 = (0x00000000, 0xeaa53cfa)
 r12 = (0x00000000, 0xae754f7f)
 r13 = (0x00004300, 0x1283c1a6)
 r14 = (0x80307c40, 0xc6b6877e)
 r15 = (0x80307c4c, 0xa9e3e905)
 r16 = (0x809aec18, 0x809aec18)
 r17 = (0x809aeab0, 0x4a113341)
 r18 = (0x80307c64, 0x0258bfe9)
 r19 = (0x80307c74, 0x376a3ef7)
 r20 = (0x80307c00, 0x265e5ad1)
 r21 = (0x80307c0c, 0xd951de6f)
 r22 = (0x80307c90, 0x8d2a4c8a)
 r23 = (0x80307ca0, 0x0540010b)
 r24 = (0x80307c18, 0x786428f2)
 r25 = (0x80307cbc, 0xdcd6a451)
 r26 = (0x80307cc8, 0x1831a202)
 r27 = (0x80307c24, 0x010c115c)
 r28 = (0x32a00357, 0x1a977c8b)
 r29 = (0x809ae7c0, 0x0402402c)
 r30 = (0x00000010, 0x00000010)
 r31 = (0x00000000, 0x00000000)
 r32 = (0x00000000, 0x809ae578)
 r33 = (0x8098c760, 0x00000001)
 r34 = (0xffea0818, 0x8c7f1478)
 r35 = (0x00000003, 0x289b7ec6)
 r36 = (0x30000000, 0xefa5878c)
 r37 = (0x002a0004, 0x4a2e2616)
 r38 = (0x800a093c, 0x6d9d61a2)
 r39 = (0x0000005f, 0xe31e3376)
 r40 = (0x00000000, 0x00000000)
 r41 = (0x8098c760, 0x00000000)
 r42 = (0x002a0900, 0x937ce5ed)
 r43 = (0x00000003, 0x13263bb5)
 r44 = (0x002a0900, 0xd5eb4566)
 r45 = (0x002a0818, 0x4e0811a1)
 r46 = (0x002a081c, 0x7199dba5)
 r47 = (0x30000000, 0x00000000)
 r48 = (0x00000000, 0x4f038231)
 r49 = (0x002a0004, 0x00000001)
 r50 = (0x0f00145f, 0xffffffff)
 r51 = (0x80295c70, 0xffffffff)
 r52 = (0x00000000, 0x00000004)
 r53 = (0x802bc4f3, 0x00000000)
 r54 = (0x00000000, 0x00000005)
 r55 = (0x0f00145f, 0x00000000)
 r56 = (0x00000000, 0x00000000)
 r57 = (0x00000000, 0x00000000)
 r58 = (0x800d5cb4, 0x00000000)
 r59 = (0x171654fb, 0x00000000)
 r60 = (0x00000000, 0x000000ff)
 r61 = (0x8009c034, 0x00000000)
 r62 = (0x00000000, 0x00000000)
 r63 = (0x8009c034, 0xacf7ffd3)

er staat ook een username/password in,
dus hiermee probeer ik eens verder te gaan