Trying to hack/crack a remote control



I've got a new Harmony 1000 remote from logitech. It's a new
touchscreen remote that has just came out. Of course, I can't leave
well enough alone and would like to take a look at the inner workings
of this thing. That's where it gets difficult and I'm hoping someone
might be able to help.

The remote connects via usb using a Belcarra USB Lan Link. The remote
gets assigned an IP address of 169.254.1.2 I've scanned it and it
shows that it is running both telnet and ftp (as well as another
service called "discard" according to nmap). So I've tried to
telnet/ftp into it using a various combination of passwords and
usernames. I've also tried to do a dictionary attack, but the remote
shuts the service down after so many attempts. I've also tried using
both Cain and Wireshark to analyze the packets being sent to the
remote during an update that is performed by the included software. I
got a lot of data, but I can't seem to find any plaintext passwords or
usernames in the packets. It seems to be just some TCP traffic
travelling between the two. The software running on the computer is
java, and the remote's software might be java as well.

Do you guys have any ideas on how I might be able to get into this
thing? Any exploits on the telnet or FTP service that can be run? Any
digging through .jar files that may reveal anything?

.



Relevant Pages

  • RE: Yes, trying to hack a remote control
    ... I've got a new Harmony 1000 remote from logitech. ... is running both telnet and ftp (as well as another service called "discard" ... combination of passwords and usernames. ... also tried using both Cain and Wireshark to analyze the packets being sent ...
    (Security-Basics)
  • Re: Telnet seesions dropping
    ... The remote problem occurs whether signned-on or not. ... dials and connect to a 2nd US Robotic 33.6 attached to our Iseries. ... We use a dialup analog router to connect to the internet, ... After 15 minutes of non-telnet usage the Telnet sessions die. ...
    (comp.sys.ibm.as400.misc)
  • Re: Vista Home Premium cant RDP to Server2003 from Internet
    ... installation of an Open Source telnet substitute isn't ... Networking, Internet, Routing, VPN Troubleshooting on ... How to Setup Windows, Network, VPN & Remote Access on ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: how to push files
    ... I am able to create & share a folder on 1 PC, ... folder on a remote PC, but I am not given the opportunity to paste them to ... I was logged in as "Administrator" on each PC. ... I am unable to connect using telnet. ...
    (microsoft.public.windowsxp.network_web)
  • [UNIX] mmmail POP3-SMTP Daemon Format String Vulnerability
    ... There is a format string vulnerability in the 'mmsyslog' function of the ... string that can be defined by a remote user. ... test:~$ telnet test.lab.intexxia.com 110 ... Connection closed by foreign host. ...
    (Securiteam)