Yeastar S20 (part 3)

The last post (Part 2) had some of the Asterisk information. This time around I’ll be diving into the Linux side of things.


uname -a

Linux yeastarS20 3.14.28 #175 SMP PREEMPT Mon Oct 24 20:43:06 CST 2016 armv7l GNU/Linux


support@yeastarS20:/bin$ cat /tmp/cmdline 
console=ttymxc0,115200 root=/dev/mmcblk1p1 rootwait ro

As I thought, the flash drive’s first partition is the root. Now I just need to figure out what the second partition is.


support@yeastarS20:/sbin$ /bin/busybox
BusyBox v1.18.4 (2016-10-31 14:16:48 CST) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.

Usage: busybox [function] [arguments]...
   or: busybox --list[-full]
   or: function [arguments]...

	BusyBox is a multi-call binary that combines many common Unix
	utilities into a single executable.  Most people will create a
	link to busybox for each function they wish to use and BusyBox
	will act like whatever it was invoked as.

Currently defined functions:
	[, [[, addgroup, adduser, adjtimex, ar, arping, ash, awk, base64,
	basename, blkid, blockdev, bootchartd, bunzip2, bzcat, bzip2, cat,
	catv, chattr, chgrp, chmod, chown, chpasswd, chroot, chvt, clear, cmp,
	conspy, cp, cpio, crond, crontab, cryptpw, cttyhack, cut, date, dc, dd,
	deallocvt, delgroup, deluser, depmod, diff, dirname, dmesg,
	dnsdomainname, du, dumpkmap, echo, ed, egrep, env, expr, false,
	fbsplash, fdflush, fdisk, fgrep, find, flash_eraseall, fold, free,
	freeramdisk, fsync, ftpd, ftpget, ftpput, fuser, getopt, getty, grep,
	gunzip, gzip, halt, hd, head, hexdump, hostid, hostname, httpd, hush,
	hwclock, id, ifconfig, ifdown, ifup, init, insmod, ionice, iostat, ip,
	ipaddr, ipcalc, iplink, iproute, iprule, iptunnel, kill, killall,
	killall5, klogd, last, length, less, linuxrc, ln, loadfont, loadkmap,
	logger, login, logname, logread, losetup, ls, lsattr, lsmod, lzop,
	lzopcat, makedevs, md5sum, mdev, mesg, microcom, mkdir, mkdosfs,
	mke2fs, mkfifo, mkfs.ext2, mkfs.vfat, mknod, mkpasswd, mkswap, mktemp,
	modinfo, modprobe, more, mount, mountpoint, mpstat, msh, mt, mv,
	nanddump, nandwrite, nc, netstat, nice, nohup, nslookup, od, openvt,
	passwd, patch, pidof, ping, ping6, pipe_progress, poweroff, powertop,
	printf, ps, pwd, rdate, rdev, readahead, readlink, realpath, reboot,
	renice, rm, rmdir, rmmod, route, rtcwake, run-parts, runlevel, sed,
	seq, setconsole, setfont, sh, sha256sum, sha512sum, showkey, sleep,
	sort, start-stop-daemon, strings, stty, su, swapoff, swapon,
	switch_root, sync, sysctl, syslogd, tac, tail, tar, tee, telnet,
	telnetd, test, tftp, tftpd, time, top, touch, tr, traceroute,
	traceroute6, true, tty, tunctl, udpsvd, umount, uname, unexpand, uniq,
	unlzop, uptime, usleep, vconfig, vi, watch, wc, which, who, whoami,
	xargs, yes, zcat


support@yeastarS20:/bin$ ls
[                ed               m-load-app       sha512sum
[[               egrep            makemime         showkey
addgroup         env              md5sum           sleep
adduser          expr             mesg             smbd
ar               false            microcom         smbpasswd
arping           fdflush          mkdir            sort
ash              fgrep            mke2fs           spiboot
astconfig        file             mkfifo           sqlite3
asterisk         filefrag         mklost+found     ssh
atftp            find             mknod            ssmtp
atftpd           firmware_detect  mkpasswd         stat
awk              fmread           mktemp           strace
base64           fold             more             strings
basename         free             mount            stty
blkid            fsck             mountpoint       su
boa              fsck.ext4        mpstat           sync
bunzip2          fsync            msh              tac
busybox          ftpd             mt               tail
busybox.old      ftpget           mv               tar
bzcat            ftpput           nc               tcpdump
bzip2            fuser            netstat          tee      gdbserver        nice             telnet
cat              gen_crc32table   nohup            test
catv             getopt           nslookup         tftp
chattr           grep             ntpd             tftpd
chgrp            gunzip           ntpdate          time
chmod            gzip             od               top
chown            hd               openssl          touch
chvt             head             openvpn          tr
clear            hexdump          openvt           traceroute
cmp              hostid           passwd           traceroute6
conspy           hostname         patch            true
cp               hush             phddns           ts_calibrate
cpio             id               pidof            tty
cpu              inadyn           ping             tune2fs
crontab          inetd            ping6            uartboot
cryptpw          ionice           pipe_progress    udpsvd
cttyhack         iostat           powertop         umount
cut              ip               pppd             uname
date             ipaddr           pppoe            uncompress
dbclient         ipcalc           printenv         unexpand
dc               iplink           printf           uni
dd               iproute          ps               uniq
deallocvt        iprule           pwd              unlzop
debugfs          iptunnel         readahead        unzip
delgroup         kill             readlink         uptime
deluser          killall          realpath         usbhubreset
df               killall5         reformime        usleep
diff             last             renice           vi
dirname          ldapadd          resize2fs        vsftpd
dmesg            ldapdelete       rev              vtund
dnsdomainname    ldapmodify       rm               watch
dropbear         ldapsearch       rmdir            wc
dropbearconvert  length           rpm              wge t
dropbearkey      less             rsync            which
dsp_proc         linux32          rtcwake          who
dsp_tool         linux64          run-parts        whoami
du               ln               scp              xargs
dumpe2fs         logger           scriptreplay     xl2tpd
dumpkmap         login            sed              yes
e2freefrag       logname          seq              ys_info
e2fsck           ls               setarch          ysnslookup
e2undo           lsattr           setserial        ysunzip
e4defrag         lzop             sh               zcat
echo             lzopcat          sha256sum

A large number of these files are found in busybox.
atftp, atftpd = a TFTP client and server.
ftpd = FTP server from GNU inetutils 1.4.1.
ldapdelete, ldapmodify, ldapsearch = OpenLDAP 2.4.26
ntpd, ntpdate = NTP 4.2.6p3
openssl = OpenSSL 1.0.2h
openvpn = OpenVPN 2.0.5
rsync = rsync 2.6.6
smbd, smbpasswd = Samba 2.2.12
vsftpd = vsftp server 3.0.2
wge t = Wge t 1.17.1
blkid, boa,, cpu, debugfs, dsp_proc, dsp_tool, dumpe2fs, e2freefrag, e2fsck, e2undo, e4defrag, file, filefrag, firmware_detect, fmread, fsck, gdbserver, gen_crc32table, inadyn, inetd, m-load-app, mke2fs, phddns, pppd, pppoe, resize2fs, spiboot, sqlite3, ssmtp, strace, tcpdump, ts_calibrate, tune2fs, uartboot, uni, unzip, usbhubreset, vtund, xl2tpd, ys_info, ysunzip

support@yeastarS20:/sbin$ ls
acpid              ifconfig           mke2fs             raidautorun
adjtimex           ifdown             mkfs.ext2          rdate
arp                ifenslave          mkfs.ext3          rdev
blkid              ifrename           mkfs.ext4          reboot
blockdev           ifup               mkfs.ext4dev       rmmod
bootchartd         init               mkfs.minix         route
capture            insmod             mkfs.vfat          runlevel
chat               iptables           mkswap             setconsole
chpasswd           iptables-multi     modinfo            setfont
chroot             iptables-restore   modprobe           slapd
crond              iptables-save      mount.cifs         slattach
depmod             iwconfig           nameif             snmpd
devmem             iwevent            nanddump           snmptrapd
dhcpcd             iwgetid            nandwrite          start-stop-daemon
dhcpd              iwlist             net_set            sulogin
dropbearmulti      iwpriv             pivot_root         swapoff
ethtool            iwspy              poweroff           swapon
fbshot             klogd              pppd               switch_root
fbsplash           l2tp-control       pppdump            sysctl
fdisk              loadfont           pppoe              syslogd
findfs             loadkmap           pppoe-connect      telnetd
flash_eraseall     logread            pppoe-discovery    tunctl
freeramdisk        losetup            pppoe-relay        udevadm
fsck               lsmod              pppoe-server       udevd
fsck.minix         madplay            pppoe-setup        udhcpc
ftpd               makedevs           pppoe-sniff        uniconfd
getty              man                pppoe-start        usb_modeswitch
halt               mathtest           pppoe-status       vconfig
hdparm             mdev               pppoe-stop         watchdog
httpd              mencoder           pppstats           ysmkfs.ext4
hwclock            mkdosfs            pthread            zcip

All except capture, chat, dhcpcd, dhcpd, dropbearmulti, ethtool, fbshot, ifrename, iptables-multi, iwconfig, iwevent, iwgetid, iwlist, iwpriv, iwspy, l2tp-control, madplay, mencoder, mkfs.ext3, mkfs.ext4, mkfs.ext4dev, mount.cifs, net_set, pppd, pppdump, pppoe, pppoe-*, pppstats, pthread, slapd, snmpd, snmptrapd, udevadm, udevd, uniconfd, usb_modeswitch, ysmkfs.ext4 are part of busybox.

support@yeastarS20:/usr/bin$ ls
[                  ftpput             nslookup           sx
[[                 fuser              od                 sz
add-shell          groups             openvt             tac
ar                 hd                 patch              tail
arping             head               pgrep              tcpsvd
awk                hexdump            pkill              tee
basename           hostid             pmap               telnet
beep               id                 printf             test
bunzip2            ifplugd            pscan              tftp
bzcat              install            pstree             tftpd
bzip2              ipcrm              pwdx               time
cal                ipcs               rb                 timeout
chpst              kbd_mode           rc                 top
chrt               killall            readahead          tr
chvt               killall5           readlink           traceroute
cksum              last               realpath           traceroute6
clear              less               remove-shell       tty
cmp                logger             renice             ttysize
comm               logname            reset              udpsvd
crontab            lpq                resize             unexpand
cryptpw            lpr                resolveip          uniq
cut                lsof               rpm2cpio           unix2dos
dbclient           lspci              rtcwake            unlzma
dc                 lsusb              runsv              unlzop
deallocvt          lzcat              runsvdir           unxz
diff               lzma               rx                 unzip
dirname            lzopcat            rz                 uptime
dos2unix           md5sum             sb                 users
du                 mesg               script             uudecode
dumpleases         microcom           seq                uuencode
eject              mkfifo             setkeycodes        vlock
env                mkpasswd           setsid             volname
envdir             my_print_defaults  setuidgid          wall
envuidgid          myisamchk          sha1sum            wc
ether-wake         mysql              sha256sum          which
expand             mysql_install_db   sha512sum          who
expr               mysqladmin         showkey            whoami
fdformat           mysqlcheck         smemcap            whois
fgconsole          mysqld_safe        softlimit          xargs
find               mysqldump          sort               xz
flock              mysqlslap          split              xzcat
fold               nc                 strings            yes
free               nmeter             sum
ftpget             nohup              sv

All except dbclient, lsusb, my_print_defaults, myisamchk, mysql, mysql_install_db, mysqladmin, mysqlcheck, mysqld_safe, mysqldump, mysqlslap, rb, rc, resolveip, rx, rz, sb, sx, sz are part of busybox.

support@yeastarS20:/usr/sbin$ ls
brctl         ftpd          nbd-client    sendmail      ubirmvol
chpasswd      httpd         ntpd          setfont       ubirsvol
chroot        inetd         popmaildir    setlogcons    ubiupdatevol
crond         ipsec         pppd          svlogd        udhcpd
dhcprelay     loadfont      rdate         telnetd
dnsd          lpd           rdev          ubiattach
fakeidentd    nanddump      readprofile   ubidetach
fbset         nandwrite     runuser       ubimkvol

All but ftpd, ipsec, pppd, and runuser are part of busybox and pppd is a link to /bin/pppd.
The ftpd is from GNU inetutils 1.4.1.
The ipsec is from Openswan U2.6.33.

Known Apps Installed

So far I have been able to determine the following applications have been installed:

  • BusyBox v1.18.4
  • Dropbear 0.53.1
  • GNU inetutils 1.4.1
  • MPEG Audio Decoder 0.15.1
  • mysql Ver 14.14 Distrib 5.1.61
  • NET-SNMP 5.5.2
  • NTP 4.2.6p3
  • OpenLDAP 2.4.26
  • OpenSSL 1.0.2h
  • Openswan U2.6.33
  • OpenVPN 2.0.5
  • rsync 2.6.6
  • Samba 2.2.12
  • vsftp 3.0.2
Bookmark the permalink.

Comments are closed.