Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@bettercorp/genieacs
Advanced tools
GenieACS is a high performance Auto Configuration Server (ACS) for remote management of TR-069 enabled devices. It utilizes a declarative and fault tolerant configuration engine for automating complex provisioning scenarios at scale. It's battle-tested to handle hundreds of thousands and potentially millions of concurrent devices.
Install Node.js and MongoDB. Refer to their corresponding documentation for installation instructions. The supported versions are:
Install GenieACS from NPM:
sudo npm install -g --unsafe-perm genieacs
To build from source instead, clone this repo or download the source archive then cd into the source directory then run:
npm install
npm run build
Finally, run the following services (found under ./dist/bin/
if building from
source):
This is the service that the CPEs will communicate with. It listens on port 7547 by default. Configure the ACS URL in your devices accordingly.
You may optionally use genieacs-sim as a dummy TR-069 simulator if you don't have a CPE at hand.
This is the northbound interface module. It exposes a REST API on port 7557 by default. This one is only required if you have an external system integrating with GenieACS using this API.
This is the file server from which the CPEs will download firmware images and such. It listens on port 7567 by default.
This serves the web based user interface. It listens on port 3000 by default. You must pass --ui-jwt-secret argument to supply the secret key used for signing browser cookies:
genieacs-ui --ui-jwt-secret secret
The UI has plenty of configuration options. When you open GenieACS's UI in a browser you'll be greeted with a database initialization wizard to help you populate some initial configuration.
Visit docs.genieacs.com for more documentation and a complete installation guide for production deployments.
The forum is a good place to get guidance and help from the community. Head on over and join the conversation!
For commercial support options, please visit genieacs.com.
Copyright 2013-2020 GenieACS Inc. GenieACS is released under the AGPLv3 license terms.
FAQs
A TR-069 Auto Configuration Server (ACS)
We found that @bettercorp/genieacs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.