ConradIOT Platform Vulnerabilty Analysis of the Raspberry Pi Image

conrad_iot_analysis.md

mqtt.rpi-cdc.conradconnect.de

they are stored in ~/.config/google-chrome/Default/Login\ Data to export to chrome-passwords.txt file: Code:

$ sqlite3 ~/.config/google-chrome/Default/Login\ Data
$ sqlite> .output chrome-passwords.txt
$ sqlite> select origin_url, username_value, password_value from logins;
$ sqlite> .exit

/opt/conrad/HardwareBackend/bin/node/_CLT/Linux_shell_scripts

# cat installRequiredPackages.sh 
#!/bin/bash
# Prerequirement: sudo apt-get install dos2unix
read -p "This program will install the ConradIoT software on your own risk. At the end, a restart will be executed. Do you like to continue? [y/n]" yn
if $yn = "y"; then
sudo unzip conrad.zip -d tempConrad
echo ------ Installing NodeJS ------
sudo curl -sL https://deb.nodesource.com/setup_7.x | sudo -E bash -
sudo apt install nodejs -y
echo ------ Installing Tinkerforge Scripts ------
sudo wget -O tinkerforge.zip http://download.tinkerforge.com/bindings/javascript/tinkerforge_javascript_bindings_2_0_11.zip
sudo mkdir -p /opt/tinkerforge
sudo mv tinkerforge.zip /opt/tinkerforge
sudo unzip /opt/tinkerforge/tinkerforge.zip
sudo rm /opt/tinkerforge/tinkerforge.zip
sudo npm -g install nodejs/tinkerforge.tgz
sudo apt-get install libusb-1.0-0 libudev0 powermgmt-base pm-utilsorge.tgz
sudo wget http://download.tinkerforge.com/tools/brickd/linux/brickd_linux_latest_armhf.deb
sudo dpkg -i brickd_linux_latest_armhf.deb
echo ------ Installing PM2 ------
sudo npm -g install pm2
echo ------ Taking over LED ------
sudo echo 'dtparam=act_led_trigger=none' >> /boot/config.txt
sudo echo 'dtparam=pwr_led_trigger=none' >> /boot/config.txt
echo ------ Installing ConradIoT environment ------
sudo mv etc/init.d/conradStart /etc/init.d/conradStart
sudo chmod 755 /etc/init.d/conradStart
sudo update-rc.d conradStart defaults
sudo mv etc/profile.d/conrad.sh /etc/profile.d/conrad.sh
sudo mv etc/systemd/system/pm2-root.service /etc/systemd/system/pm2/pm2-root.service
sudo rm -rf tempConrad/etc
echo ------ Installing ConradIoT main program ------
sudo mkdir -p /opt/conrad/HardwareBackend
sudo mv -i opt/conrad/HardwareBackend/* /opt/conrad/HardwareBackend
sudo rm -rf tempConrad/opt
# todo env ConradPATH wird noch nicht gesetzt....
sudo pm2 start /opt/conrad/HardwareBackend/ecosystem.config.js
sudo env PATH=$PATH:/usr/local/bin pm2 startup
sudo mv /opt/conrad/HardwareBackend/pm2-root.service /etc/systemd/system/pm2-root.service
sudo dos2unix /opt/conrad/HardwareBackend/bin/node/_CLT/CLT.js
sudo npm install /opt/conrad/HardwareBackend/bin/node -g
sudo rm -rf tempConrad
sudo rm conrad.zip
sudo reboot now
else
echo "Installation stopped..."
fi

/home/pi

# cat updateImage.sh 
#!/bin/sh
sudo pm2 stop all
echo Please enter the IP of the PC you are running http-server on, e.g. 192.168.2.180
read IP
sudo wget http://$IP:8080/conrad.zip
sudo unzip -o conrad.zip
sudo rm -rf /opt/conrad/HardwareBackend
sudo mv opt/conrad/HardwareBackend /opt/conrad/HardwareBackend
sudo rm -rf opt
sudo rm -rf etc
sudo rm conrad.zip
sudo nano /etc/wpa_supplicant/wpa_supplicant.conf
echo Restart PM2? [y]
read restart
if [ restart ]
  then sudo pm2 restart all
fi
history -c
history -w