Hacking the modules

[vision]

Hi,

Just thought I'd share my experiences with playing with the module files for the N2100. I should warn everyone before they start playing - I managed to get a permanent module which won't uninstall by not TARing the files properly before uploading to my YES box.

Rather than retype everything, I'm going to cut and paste what I sent to ktula:

How did you go with the module files I sent you? I decided to do a bit of poking around with them and opened them with winrar - it turns out they are just zipped tar files. For each module there are several system directories, along with a redundant (?) TGZ of the directories and a MOD file which is just the same TGZ file renamed.

For the PPP-Blog module, there are three directories which are Configure, Shell and WWW. WWW contains the program files.

I did some searching and found the version of PPP-Blog used is available for download form sourceforge ( sourceforge.net/project/showfiles.php?group_id=148767&package_id=164151 ).

All the files from the sourceforge package are in the WWW folder for PPP-BLOG.MOD, plus an extra img directory.

Long story short? I think if you have any PHP scripts lying around, you could get them to run pretty quickly and easily on the Thecus box.

I also looked into the bittorrent module, and it looks a bit more fiddly. It has a Binary, Driver and System directory in addition to the other three. They're just using compiled binaries from CTorrent though ( ctorrent.sourceforge.net/?action=installation). So maybe it's not so hard to get compiled binaries running on there either?

Also - when you enable or disable a module it actually executes a script in the Shell folder. Could be an easy workaround for executing stuff in the operating system through the web interface

Also it appears the System and Driver folders in the bittorrent module are empty. To run an external application, Thecus seem to simply be using PHP to execute command line based programs and return the results. For example:

$cmd='/bin/cat "/raid/module/P2P-BT/sys/conf/'.$_GET['taskname'].'" | /bin/grep ctorrent';
$torrent_info = split(" ",trim(shell_exec($cmd)));

[holmes4]

Ok - I can see an entry for "modules" in the admin panel, but yours is the first mention I have ever seen of what they might be. Please provide more information or a pointer to where I can read about them.

[marty]

It is interesting when you create a share folder named "module". You will see a lot of directories, bin, drv, shell, sys, and www etc.
If you go to the www directory, you will actually see a file named index.htm. This file looks very much like PHP to me.

I think if you modify the file here, you should be able to run your own PHP code.

[gunny2k6]

ye from what i can tell from downloading the gpl code for firmware 2.1 its NetBSD Linux based i think (dont quote me on that) running apache 2.0.55 and php 5.0.5 funy enough theres a mysql folder in source too and its documents says mysql 4.0.16

[ear1grey]

marty said:

This file looks very much like PHP to me.
I think if you modify the file here, you should be able to run your own PHP code.

Does <?php phpinfo(); ?> produce anything useful?

[gunny2k6]

well by going into ur N2100 admin panel adding a folder and naming it module if u log back out and go to ur webdisk then click on module folder it will show you the installed modules and allow to upload stuff into PPP-BLOG so i added a phpinfo.php file and this is some of the results.

PHP Version 5.0.5
Server API Apache 2.0 Handler

System
Linux Thecus_N2100 2.6.9-n2100 #2 Tue Jul 4 13:45:10 CST 2006 armv5tel

Build Date
Apr 7 2006 14:18:18

Configure Command

'./configure' '--host=i386-linux' '--target=armv5l-linux' '--prefix=/opt/php' '--with-config-file-path=/opt/apache/conf' '--disable-ipv6' '--with-apxs2=/opt/apache/bin/apxs' '--without-mysql' '--without-pear' '--disable-cli' '--without-jpeg' '--without-iconv' '--enable-sqlite-utf8' '--disable-simplexml' '--disable-dom' '--enable-memory-limit'

Configuration File (php.ini) Path
/app/etc/httpd/conf/php.ini

DOCUMENT_ROOT
/opt/apache/htdocs

SCRIPT_FILENAME /opt/apache/htdocs/module/PPP-BLOG/phpinfo.php

[marty]

Is the module file encrypted? Can you find out more about how it gets installed and executed?

[gunny2k6]

the PPP-BLOG.mod file isnt encrytped at all its like a zip file basicly the best way to open in is with a program called 7ZIP you just open it like a zip file and it lists content then click on that and it then opens the encryted data that WinZip cant see as its actualy a tar.gz file just renamed to .mod

the modules have a enable/disable .sh script for the admin web page and they have a install/uninstall .sh script for admin webpage all they list is basic linux .sh scripts telling the box what to do with the files when the user selects the option in webadmin

i have edited the PPP-BLOG.mod using 7Zip to add a custom Blog theme which works then i found the adding module directory to the webadmin displayed the module folder so u dont have to edit the .mod file to add themes or scripts (but limitation is it has to be put in the PPPBLOG module folder and the module has to be enabled to access ur own scripts.

so far no success in editing the pppblog module to make a custom space/tutorial for custom modules