Belkin Wemo - Revision history

Martiniturbide at 16:52, 3 January 2017

2017-01-03T16:52:32Z

← Older revision		Revision as of 16:52, 3 January 2017
Line 32:		Line 32:
	==Root Demo==		==Root Demo==
	{{#ev:youtube\|VQ-DMW-b9rM}}		{{#ev:youtube\|VQ-DMW-b9rM}}

			[[Category:Belkin]]

Resno: Text replacement - "gtvcom-20" to "exploiteers-20"

2016-02-07T01:22:38Z

Text replacement - "gtvcom-20" to "exploiteers-20"

← Older revision		Revision as of 01:22, 7 February 2016
Line 7:		Line 7:
	== Purchase ==		== Purchase ==
	Buying devices is expensive and, in a lot of cases our testing leads to bricked equipment. If you would like to help support our group, site, and research please use one of the links below to purchase your next device.		Buying devices is expensive and, in a lot of cases our testing leads to bricked equipment. If you would like to help support our group, site, and research please use one of the links below to purchase your next device.
	[http://www.amazon.com/gp/product/B00BB2MMNE/ref=as_li_tl?ie=UTF8&camp=1789&creative=390957&creativeASIN=B00BB2MMNE&linkCode=as2&tag=~~gtvcom~~-20&linkId=AKX4PJGS77XSRG57 Purchase the Belkin Wemo at Amazon]		[http://www.amazon.com/gp/product/B00BB2MMNE/ref=as_li_tl?ie=UTF8&camp=1789&creative=390957&creativeASIN=B00BB2MMNE&linkCode=as2&tag=exploiteers-20&linkId=AKX4PJGS77XSRG57 Purchase the Belkin Wemo at Amazon]

	== UART Pinout ==		== UART Pinout ==

Zenofex at 04:32, 8 March 2015

2015-03-08T04:32:11Z

← Older revision		Revision as of 04:32, 8 March 2015
Line 29:		Line 29:

	A second bug allows you to boot a new kernel or execute bootloader commands by holding down buttons 0-4 when powering on. This will let you boot a new kernel, or drop to a U-Boot shell and enter your own commands.		A second bug allows you to boot a new kernel or execute bootloader commands by holding down buttons 0-4 when powering on. This will let you boot a new kernel, or drop to a U-Boot shell and enter your own commands.

			==Root Demo==
			{{#ev:youtube\|VQ-DMW-b9rM}}

Zenofex: 1 revision: Moving from DC22 to main site.

2014-08-17T08:22:42Z

1 revision: Moving from DC22 to main site.

← Older revision	Revision as of 08:22, 17 August 2014
(No difference)

CJ at 01:53, 7 August 2014

2014-08-07T01:53:52Z

New page

__FORCETOC__
{{Disclaimer}}
[[File:BelkinWemo.png|200px|left|thumb]]
[[Category:Home Automation]]
This page will be dedicated to a general overview, descriptions, and information related to the Belkin Wemo.

== Purchase ==
Buying devices is expensive and, in a lot of cases our testing leads to bricked equipment. If you would like to help support our group, site, and research please use one of the links below to purchase your next device.
[http://www.amazon.com/gp/product/B00BB2MMNE/ref=as_li_tl?ie=UTF8&camp=1789&creative=390957&creativeASIN=B00BB2MMNE&linkCode=as2&tag=gtvcom-20&linkId=AKX4PJGS77XSRG57 Purchase the Belkin Wemo at Amazon]

== UART Pinout ==
<gallery>
File:BelkinWemoUart.png
</gallery>

== Exploitation ==
The Wemo has been the subject of many exploits, and below is another one that was believed closed by the community:

While booting the Wemo in Recovery mode, a root console is accessible for under 1 second via UART. Within this time a command can be run to terminate the reset process, leaving us with a root shell and full device access.

Start by connecting a UART adapter, as outlined in the above section, console speed 57600,8N1. Hold the recovery button while powering on the Wemo, and keep it held for 10 seconds.

When seeing output regarding flash erasing, paste the command below and hit enter. Repeat until you get a root shell!

<pre>
kill -9 $(ps | grep 'reboot'|sed -r -e 's/^ ([0-9]+) [0-9]+/\1/')
</pre>

A second bug allows you to boot a new kernel or execute bootloader commands by holding down buttons 0-4 when powering on. This will let you boot a new kernel, or drop to a U-Boot shell and enter your own commands.

Belkin Wemo​ - Revision history

Martiniturbide at 16:52, 3 January 2017

Resno: Text replacement - "gtvcom-20" to "exploiteers-20"

Zenofex at 04:32, 8 March 2015

Zenofex: 1 revision: Moving from DC22 to main site.

CJ at 01:53, 7 August 2014

Belkin Wemo - Revision history