What are the specs (CPU, RAM) for the card?
According to author's post in the Reddit thread, it has a 400MHz arm9 with 30MB of RAM.
Hacking Transcend WiFi SD Cards
31–40 of 58 posts
Re: Hacking Transcend WiFi SD Cards
#32"Perl has a nice feature when opening a file with the open() library call, because it not only opens files, but runs programs if the file path is not a path, but a shell command ending in a pipe." I thought only PHP did things like that :) I hope this is disabled in mod_perl? Because if not I need to let someone know they need to audit their code. PS. I get how useful this is, and it's well documented, but this funct…
I believe it's enabled under mod_perl. If that someone was allowing user input to make it to an open, system, or back tick call unfiltered then this is just one thing to worry about. It's as bad or worse than taking unfiltered input and building an SQL query with it.
Moreover, this isn't a Perl issue. I can think of ways to do similarly I'll advised things with C#'s process.start or C/C++'s System command.
Re: Hacking Transcend WiFi SD Cards
#33Earlier quoted context omitted.
Java. Oh, don't worry, that's like totally secure. [tries to keep straight face, fails utterly]
I really should start blogging - one of my many unfinished projects is a teardown and reverse engineering effort of a Philips BD player. Java isn't even the half of it.
Please do!
Re: Hacking Transcend WiFi SD Cards
#34This is cool. Unfortunate in some ways that it has an AR6003 wifi, since ath6kl (the OS driver for the AR6003) doesn't have monitor or promiscuous mode support yet which means no sniffing or injection.
Because if it did, it would be an interesting choice for pen testing. You could recase it, and it's small enough that properly installed and configured, it would be difficult to find. Processor is fast enough to get some cool tricks going.
Of course, it's possible some clever kernel hacker will get those working on the AR6003 at some point, which would open up this, as well as a bunch of devices, to some cool uses.
Re: Hacking Transcend WiFi SD Cards
#35Re: Hacking Transcend WiFi SD Cards
#36This is cool. Unfortunate in some ways that it has an AR6003 wifi, since ath6kl (the OS driver for the AR6003) doesn't have monitor or promiscuous mode support yet which means no sniffing or injection. Because if it did, it would be an interesting choice for pen testing. You could recase it, and it's small enough that properly installed and configured, it would be difficult to find. Processor is fast enough to get so…
A pen testing pen.
Re: Hacking Transcend WiFi SD Cards
#37Excellent post. Thanks! Hopefully these will become dirt cheap (or, worth hacking because they'll be cheaper than the electric imp).
Re: Hacking Transcend WiFi SD Cards
#38What are the specs (CPU, RAM) for the card?
According to author's post in the Reddit thread, it has a 400MHz arm9 with 30MB of RAM.
That's actually pretty decent considering what it is.
Do you think you could run owncloud or something similar to use it as a sort of wireless flash drive?
Re: Hacking Transcend WiFi SD Cards
#39"Perl has a nice feature when opening a file with the open() library call, because it not only opens files, but runs programs if the file path is not a path, but a shell command ending in a pipe." I thought only PHP did things like that :) I hope this is disabled in mod_perl? Because if not I need to let someone know they need to audit their code. PS. I get how useful this is, and it's well documented, but this funct…
Perl has the three argument open that is safe. The issue is well known by perl developers and well explained in the popular free book "Modern Perl".
Re: Hacking Transcend WiFi SD Cards
#40It's very cool to be able to write remotely on a SD Card when you have for example a Makerbot 3D Printer, or any device with a SD Card reader but without wifi / ethernet connection: never plug in / out the SD Card anymore !