attify / firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities
MIT License
1.29k stars 251 forks source link

[help wanted] Cant ping from the Emulated to client #94

Closed AnduinBrian closed 6 months ago

AnduinBrian commented 6 months ago

Hello i use FAT to emulate the WR841N device. After i login, i got shell root. I start iptables to accept the connect:

iptables -F
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

I can connect to web server from client and the client can ping the emulated router. But on the router, i cant ping to client (192.168.0.2) Screenshot from 2023-12-21 15-23-30 But on the client, i can ping to the emulated router. Screenshot from 2023-12-21 15-25-03

I can ping from router to client when i emulated the NetGear D6000. So what actually happend in my case ?

extremecoders-re commented 6 months ago

Is there a firewall on the host which is preventing ping? In case if you already are able to achieve bidirectional communication it shouldn't be an issue.

Also please run ifconfig, brctl within the router and check the interfaces. Maybe there is no route or a misconfigured route which is preventing traffic from reaching the host.

AnduinBrian commented 6 months ago

My ufw is off. image There is no bidirectional communication because i cant connect to my tftp sv on the 0.2 client. The router ifconfig image The client ifconfig image the router brctl image I tried to set the broadcast same as the router but still cant.

AnduinBrian commented 6 months ago

Found out, the IP range 192.168.0.1/24 is the problem. I manualy delete the bridge and create a new one in the router (using brctl). After that i use ifconfig to set ip on both. It worked.