Digisol dg hr3400 password#

Then what's the difference? If we closely compare the list of commands available to the first admin account with priority 0x02 and the one with priority 0x01, more are the commands at the disposal of the latter admin account. The only option to know was to give it a try. So did that mean the second admin account was valid as well.

The second occurrence of Admin had a priority value of 0x01 and backdoor value 0x01. User account had a priority value of 0x0 and backdoor value 0x0 as well.

Interesting ha?!!!ДЄdmin account had a priority value of 0x02, and backdoor value 0x0. Voila! the command returned the configured usernames, their respective passwords, priority and a third value called BACKDOOR.

Digisol dg hr3400 password#

On issuing the ' cfgmib get USERNAME_PASSWORD' command it displayed the username and password lists currently configured on the host. The get option of cfgmib command could display selective config items. On issuing the aforementioned command with an all option, the PuTTY console was flooded with considerable amount of configuration outputs formatted as XML-like name value pairs. One that caught my attention was the cfgmib command. In search of a busybox powered shell, I scrolled through the list of managment commands.

Just when the novelty of admin privileged web interaction was worn off, I tried to dig deeper by knocking on the earlier discovered open telnet port with PuTTY. Knock-Knock!!! Anyone Backdoor? Telnet Here