From 7f2e0aee15d9985fd9819af41362749a5ebbe94d Mon Sep 17 00:00:00 2001 From: Conor Horan-Kates Date: Tue, 22 May 2018 22:08:31 -0700 Subject: [PATCH] cleaning up markdown --- revolabs-flx_uc_1000/README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/revolabs-flx_uc_1000/README.md b/revolabs-flx_uc_1000/README.md index 9fd9746..03f8f47 100644 --- a/revolabs-flx_uc_1000/README.md +++ b/revolabs-flx_uc_1000/README.md @@ -208,13 +208,13 @@ shows us that they are booting with ```mem=128M console=ttyS0,115200n8 root=/dev }]) ``` -looking at this, it would appear that http:///app/diag/diag.html exposes a mechanism to execute arbitrary commands. `/usr/sbin/telnetd` anyone? +looking at this, it would appear that http://\/app/diag/diag.html exposes a mechanism to execute arbitrary commands. `/usr/sbin/telnetd` anyone? ### log mining and traffic sniffing using functionality, and the high logging levels they provided, was able to determine a number of things: * it utilizes the [pjsua](http://www.pjsip.org/pjsua.htm) library/client - * it sends a TFTP BOOT request for tftp:///.xml every 30 seconds + * it sends a TFTP BOOT request for tftp://\/.xml every 30 seconds next step will be combining the information about the `telnet_enabled` kernel parameter, and crafting a TFTP configuration that will do just that.