Hacking Wii running ftp

[wiigamer]

Don't know if this will amount to anything but i did a port scan on my Wii's ip addy and the only open port was 21, common ftp port(for those who dont know), could lead to an exploit of some kind, maybe not...

http://www.dcemu.co.uk/vbulletin/showthread.php?t=43392
hmm might be able to do something here like send a packet of exploit code

 

[Hitto]

Or maybe they're using port 21 out of spite? IIRC, port numbers are only conventions, guidelines, nothing stops you from running your FTP server on port 1234.

 

[Kyoji]

I think if we through around the words "code" "exploit" and "malicious" along with phrases like "buffer overflow" we might be closer to sounding like we know what we are talking about!

 

[crumpster]

Here you go Kyoji

Knowing this we can probably write some "malicious" "code" that will "exploit" the ftp port and create a "buffer overflow"

 

[The_Pope]

Could someone, preferbly with an unupdated Wii, try and update it. While doing this, can somone run a program Such as Wireshark, and see if any data is transmited to port 21 using normal FTP transmissions?

 

[cenotaph]

Well, what are you waiting for? Whip out netcat and connect to it, on the double! ... although I doubt it'd have a banner or something if it's not for you to use.

 

[corbs132]

I didn't update mine yet. Ill sniff it for ya, see whats going on. Might be while, as cant play yet. (complications)

 

[Kyoji]

Here you go Kyoji

Knowing this we can probably write some "malicious" "code" that will "exploit" the ftp port and create a "buffer overflow"

Omg, you sir are one 1337 h4x0r.

 

[wiigamer]

Here you go Kyoji

Knowing this we can probably write some "malicious" "code" that will "exploit" the ftp port and create a "buffer overflow"

Omg, you sir are one 1337 h4x0r.

lol too much psp terms are stuck on us

 

[The_Pope]

Here you go Kyoji

Knowing this we can probably write some "malicious" "code" that will "exploit" the ftp port and create a "buffer overflow"

Omg, you sir are one 1337 h4x0r.

It would actually exploit the server that is listening on the FTP port, not the port itself. And it wouldn't be malicious code, it would be a malicious binary

 

[xiaNaix]

The mail port (110) was also open on mine.

 

[travis134]

Lol, you all, please STOP using the word malicious! This may be arbitrary code (I beleive that is what you are trying to say...) Malicious: " full of, characterized by, or showing malice; malevolent; spiteful: malicious gossip."

I'm not sure if the Wii will be able to accept anything except for mail on the mail's port... But let's just say it does crash the interface, then what? Then the kernel hypervisor will reset the program, so no code was able to be run. Furthermore, does anyone even know how to program for the wii????

 

[corbs132]

Woops, forgot to sniff. sorry, saw this thread while looking for something to do while wii updates... lol

 

[SkeletonSmith]

Huh