If you haven’t noticed, in my spare time I really enjoy breaking into embedded devices for the fun of things. Over the past year, I have spent a ton of time rooting the Cisco Meraki MR18, and today I get the chance to publicly disclose my findings.
To start, let me note by saying I have properly disclosed this issue to Cisco Meraki months ago, but due to the fact they are no longer replying to my emails or honoring their own Bug Bounty, I have decided to publicly disclose this after waiting over 90 days since their last reply. Hopefully one of these days I will write up the process I used to find this “exploit”.
Every now and then I come across some interesting devices, one of which was the Cisco Air-OEAP602 “Access Point”. This little guy has an impressive spec sheet with a BCM4718A1 CPU running at 480Mhz, 16MB of flash, and 64MB of RAM but sadly the stock firmware lacks many standard features. Obviously as an enterprise offering it has unique things such as OfficeExtend, but what good are they if they are closed source? Time to hack this thing!
Recently I purchased a few “Smart” LEDs from a site called LimitlessLED due to positive feedback from a close friend. After all was said and done, I walked away with 3 RGB LED Bulbs, a remote control, and one of their cool WiFi Receiver Bridges. After waiting a few weeks everything showed up and was working fine out of the box, except the WiFi Bridge. Thus started my journey to figure out what in the hell was going on which ended with me converting the adapter to work from a Raspberry Pi.
After searching the internet for a monitoring solution for my network, I can finally say I have found the best contender, and its worth sharing. Consider this a update/solution to my previous rant about monitoring software.
How does a painless, easy install sound? How about cross platform support? Would you like Graphing/Logging of network traffic and system resources? What if I said it was based on PHP/SNMP, and it is 100% free and open-source? Ladies and gents, let me introduce you to Observium!
I am tired of looking for a simple, functional server monitoring program. I have spent the last week or so trying to get a fully functional setup of Nagios, Cacti, Zabbix, or Icinga and almost all to no prevail. Why is there no EASY and SIMPLE monitoring program out there that is Open Source, customizable, AND functional?