7 replies to this topic

[jeco92]

I tried an opkg on my vu duo (reflashed with a new version a few days ago) ang error :

* opkg_download: Failed to download http://downloads.p
li-images.org/feeds/openpli-4/3rd-party/Packages.gz, wg
et returned 127.
* opkg_download: Failed to download http://downloads.p
li-images.org/feeds/openpli-4/3rd-party-vuduo/Packages.
gz, wget returned 127.
* opkg_download: Failed to download http://downloads.p
li-images.org/feeds/openpli-4/all/Packages.gz, wget ret
urned 127.
* opkg_download: Failed to download http://downloads.p
li-images.org/feeds/openpli-4/mips32el/Packages.gz, wge
t returned 127.
* opkg_download: Failed to download http://downloads.p
li-images.org/feeds/openpli-4/vuduo/Packages.gz, wget r
eturned 127.

Is this an error from openpli servers or from my vu ?

How can I solve it without reflashing it ?
Thank's in advance.

[WanWizard]

Try downloading it with your browser. If that works, it's a box issue. They download fine here, so I expect the later.

 

Can you telnet into your box, and give the command "which wget". Can it be found? I've seen this before, on a hacked box...

[jeco92]

The download works through a browser.

Which wget returns nothing (on a working vu Ultimo it returns /usr/bin/wget)

I think the box could have been hacked as I forgot to put a password after reflashing it a week ago.

As I can't directly access the box for a while (father's one), how can I reflash/repair it from outside (internet) ?

It seems also I cannot access it trough FTP only through telnet.

[jeco92]

After a few checks, it seems only wget is missing (I will check the FTP problem later).

So I have done the following with my Android tablet (no PC available) :

- Using ESexplorer, I copied wget file from my working Vu Ultimo to /storage/sdcard0
- I installed SSHDroid (user root, pwd admin as defaults)
- Using ConnectBot, I connect my own Android tablet through ssh
- Under SSH, I copied the file to the remote vu duo using scp command

The command was "scp /storage/sdcard0/wget root@remote_vuduo:/usr/bin" where remote_vuduo is the ip address of the remote box

- connect to the remote box and chmod 777 the wget file so it will be executable.

Opkg update now works.

What do I have to check to get FTP working again ?
Can I reinstall FTP Using Opkg ? What is the name of the package ?

[Trial]

Hi,

that wget is missing might be a sign that your box might be hacked. Deleting or renaming wget is a trick to prevent updates. I would do a fresh install and immediatly change the password after flashing.

 

ciao

[WanWizard]

Can't say it enough:

 

never, ever, ever, connect an STB directly to the internet, or forward any port to it other than perhaps SSH (and then with a certificate and not username/password)!

 

Disconnect and flash it immediately, it's probably now part of a botnet, and if there are other devices in the LAN, who knows what else they have had access too...

[jeco92]

Hopefully, there is no other device on the lan except the internet box. I have configured a sniffer to monitor access to the internet box and did not see any anormal access. To be sure I changed webif ports and let only access to it from the outside.

I will do a reflash as soon as possible.

Thank you for your answers.

[janejak]

@jeco92 try https://pentest-tool...ner-online-nmap and put in ur ip if it allredy is not in there and mark all and hope u get nothing like i do:

Starting job... [2015-03-05 03:11:50]             Stay on this page for results!

Starting Nmap 6.00 ( http://nmap.org ) at 2015-03-05 05:11 EET
NSE: Loaded 17 scripts for scanning.
Initiating Ping Scan at 05:11
Scanning 84.247.xxx.xxx [4 ports]
Completed Ping Scan at 05:11, 1.33s elapsed (1 total hosts)

Nmap scan report for 84.247.xxx.xxx [host down]
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Nmap done: 1 IP address (0 hosts up) scanned in 1.80 seconds
Raw packets sent: 8 (304B) | Rcvd: 2 (80B)

 

Job finished [2015-03-05 03:11:52]

Edited by janejak, 5 March 2015 - 04:16.