JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.
-
Upload
frederick-price -
Category
Documents
-
view
219 -
download
0
Transcript of JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.
![Page 1: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/1.jpg)
JAILBREAKING SOHO ROUTERS
Dennis Little @ CPLUG | 2010 Aug 10
![Page 2: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/2.jpg)
Thank you!
Jim Capp @ Anteil - Asus router loan for demoshttp://www.Anteil.com
Open source programming& integration
Asterisk digital voice solutions
Customer Relationship Management software
![Page 3: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/3.jpg)
Thank you!
tapestry technologies, LLC – food sponsorhttp://TapestryTech.com
Expertise: DoD STIG (Security Technical Implementation
Guide)
Security Training
Technology Management Partner – full-service technology acquisition, integration and management services
![Page 4: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/4.jpg)
Terms
Firmware – “a term often used to denote the fixed, usually rather small, programs and/or data structures that internally control various electronic devices” – Wikipedia.org
TFTP – trivial file transfer protocol; used to load firmware to a lot of routers/devices with little RAM
JTAG – troubleshooting port useful for fixing “bricked” (ie: corrupted) devices, converter required
![Page 5: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/5.jpg)
Alternative firmware – WHY? Extend functionality beyond stock
firmware
OpenVPN – server and client endpoint
Advanced QoS – service, MAC and port-based
VLAN
SSH server
![Page 6: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/6.jpg)
Alternative Firmware – WHY?
Advanced wireless functionality – AP, client bridge, repeater, WDS
SIP proxy
More advanced port-forwarding and triggering (origination lock-out)
Network traffic graphing
![Page 7: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/7.jpg)
Alternative Firmware – WHY?
Dynamic DNS – sane updates
Hotspot portal / captive portal
Transmit power control / boost (don’t burn out!)
Site survey & Rx/Tx antenna selection
![Page 8: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/8.jpg)
Compatible Hardware
Demo of 3 different models in this talk
Wireless-G router: WRT54G (v1.1) – WRT54GL is a known good candidate, regardless of version
Wireless-G access point: EOC-1650 – requires activation of DD-WRT (~$30 US)
Wireless-N router: Asus RT-N16
![Page 9: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/9.jpg)
WRT54G / WRT54GL
~$60 shipped, hard to find in brick and mortar
1 WAN, 4 LAN Not all versions of WRT54G are compatible! WRT54GL v1.0 / 1.1 compatible BCM5352 – 200 MHz RAM: 16MB FLASH: 4MB 100 mW max (?)
![Page 10: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/10.jpg)
Senao / Engenius EOC-1650
~$50 shipped, hard to find brick and mortar Wireless AP with internal 7dBi panel and 5
dBi external SMA omni antenna (selectable), 300’ PoE injector included, 200 mW max radio
Requires purchase of DD-WRT Professional Atheros AR2315 – 180 Mhz RAM: 32MB Flash: 8MB
![Page 11: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/11.jpg)
Asus RT-N16
~$95 shipped Wireless N router 1 WAN, 4 LAN, 2 USB BCM4718A – 500 MHz RAM: 128 MB Flash: 32 MB
![Page 12: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/12.jpg)
Alternative Firmware
We will cover: Tomato
http://www.PolarCloud.com/tomato
OpenWRT http://www.OpenWRT.org
DD-WRT http://www.dd-wrt.com
![Page 13: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/13.jpg)
Alternative Firmware
Also available…
FreeWRT http://www.FreeWRT.org“meant to be an appliance development kit (ADK) especially designed for embedded system developers and advanced users.”
![Page 14: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/14.jpg)
Tomato – PolarCloud.com
Simple replacement for Linksys, Buffalo, BCMxxx
Extends Linksys WRT54GL GPL firmware
License ? – author’s permission?
Simpler of the 3 with some powerful features
Linksys WRT54G v1-4, GS v1.-4, GL, Buffalo G54/G54s, Asus WL500G
![Page 15: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/15.jpg)
OpenWRT – OpenWRT.org
GPL license
Latest version: Backfire (v10.03)
Very large HCL (hardware compatibility list)
Perhaps a bit more complicated, as many functions as command-line only
![Page 16: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/16.jpg)
DD-WRT – DD-WRT.com
Nice HCL database search and compatibility
Lots of functionality, 99% GUI-driven
Controversial - “GPL”; does not follow GPL 100%, accusations of stolen code, encrypted GUI code
Commercial version available
![Page 17: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/17.jpg)
HCL – Am I compatible?
Tomatohttp://www.polarcloud.com/tomatofaq
OpenWRThttp://wiki.openwrt.org/toh/start
DD-WRThttp://www.dd-wrt.com/site/support/router-database
![Page 18: JAILBREAKING SOHO ROUTERS Dennis Little @ CPLUG | 2010 Aug 10.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649da15503460f94a8d7a7/html5/thumbnails/18.jpg)
Demo Time!
GUI of Tomato, OpenWRT and DD-WRT