Zsun SD111 Is Now “Officially” an Hackable Wireless Flash Drive
Zsun SD11x are Wi-Fi flash drives for 8 to 128 GB eMMC, alternative to Sandisk or Kingston. Yesterday, I soldered the UART pins to Zsun SD111 (8GB) flash drive to access the serial console, but I did not manage to enter the terminal as it was password-protected. I posted my results anyway, as I was convinced I would get some clever ideas from my readers, some of which appeared to be a little time consuming, but Zoobab offered a simple solution that consisted in changing the boot parameters, by replacing /sbin/init by /bin/sh. The first step is to interrupt the boot by pressing space or another key, in order to access U-boot. Now we can check the U-boot environment ar7240> printenv bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 rw init=/sbin/init mtdparts=ar7240-nor0:64k(u-boot),64k(u-boot-env),6720k(rootfs),1216k(uImage),64k(NVRAM),64k(ART) bootcmd=bootm 0x9f6B0000 bootdelay=4 baudrate=115200 ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee ipaddr=10.168.168.1 serverip=10.168.168.10 stdin=serial stdout=serial stderr=serial ethact=eth0 Environment size: 361/65532 bytes Let’s keep everything the same, except the init, […]