Please enable JavaScript.

Coggle requires JavaScript to display documents.

FW hardening - Coggle Diagram

- - - - The “Compile with debug” entry in advanced developer menu enables “-g3” compile option.
      - You have to disable sstrip to keep debug information
        
        Note, if you just want to build a single package unstripped, try, “make package/foo/compile STRIP=true” Also, unstripped binaries are placed in “staging_dir/target-/root-/” where your host side tools can use them. (Remember, gdbserver can attach to the stripped binary, while gdb loads the unstripped binary) see gdb
        
        Возможно, опечатка и должно быть STRIP=false
        
        Alternatively: You can add or modify “Custom Target Options” like add “-g3 -ggdb3”
        
        Be aware there are default compiler options defined in include/target.mk for example (“-Os -pipe”)
  - - - /usr/sbin/wpa_supplicant (Point-to-Point Protocol daemon)
      - BusyBox 1.25.1
        
        В том числе busybox wget
      - Linux Kernel 3.14.77
      - Samba Services: total of 137 Vulnerabilities.
        
        Выпилить
      - Curl: https://curl.haxx.se/docs/CVE-2018-0500.html
      - /usr/bin/vtysh is containing few backdoor strings
      - Private Key exposed in the router
      - Shadow file exposes the Password hash which can be cracked
      - libpcap 1.5.3