Logging In As root - Scalar i2000 (and maybe i6000)

Submitted by gpmidi on Fri, 12/14/2018 - 16:02
  1. Connect to the service port
    1. It's that little black covered on that says not to use
  2. Set your ip to 10.10.1.100
    1. The last octet can be anything but .1
  3. Use 'telnet' to connect to 10.10.1.1
  4. Login with "root" and "dallas"

 

I found this by using john the ripper on /etc/shadow in 10.10.1.1:/tftpboot/cmboot/initrd-dmcb (NFS). The initrd is gzip'ed. Once unzipped you can mount it with a loop device.

 

/etc/passwd

 

root:x:0:0:root:/root:/bin/ash
adicadm:x:600:100:ADIC Administrator:/home/adicadm:/bin/ash
bin:x:1:1:bin:/bin:/bin/ash
ftp:x:40:49:FTP account:/srv/ftp:/bin/ash
admin:x:100:0:admin:/home/admin:/bin/ash
nobody:x:65534:65533:nobody:/var/lib/nobody:/bin/ash
sshd:x:71:65:SSH daemon:/var/lib/sshd:/bin/false

/etc/shadow [i2000]

root:E.XuAZhbYJOrU:11815:0:10000::::
bin:*:8902:0:10000::::
ftp:*:13698::::::
admin:library:12000:0:99999:7:::

/etc/shadow [i6000]

root:E.XuAZhbYJOrU:11815:0:10000::::
bin:*:8902:0:10000::::
admin:library:12000:0:99999:7:::
adic_acc:foQD2kgL4MRTM:12769:0:99999:7:::
ilinkacc:eEn/aM3OXU76g:14937:0:99999:7:::

In both cases the "root" password is "dallas". 

Note: With the i6000 the sshd_config restricts SSH logins to ilinkacc and adic_acc; root can't login via ssh. 

 

Updated for i6000 / 794Q.GS00300

root: # cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
adicadm:x:600:100:ADIC Administrator:/home/adicadm:/bin/false
bin:x:1:1:bin:/bin:/bin/bash
daemon:x:2:2:daemon:/sbin:
ftp:x:40:49:FTP account:/srv/ftp:/bin/false
admin:x:603:100:admin:/home/admin:/usr/bin/app_UI_CLI
nobody:x:65534:65533:nobody:/var/lib/nobody:/bin/false
sshd:x:71:65:SSH daemon:/var/lib/sshd:/bin/false
ilinkacc:x:602:100:iLink Access:/home/ilinkacc:/bin/bash
vxworks:x:2001:100:vxWorks User:/home/vxworks:/bin/bash
cvtl:x:604:100:CVTL Diags:/home/cvtl:/bin/false

root: # cat /etc/shadow
root:$6$WXZ3K3UaDMPuNta8$gXGdqbz3Hfd58zBLu39kN.CkLcACMZQ16po6kgniB1aVB6JTunqxOHGfAuMSpN/QmirJO.XHFJuvplKCFaCCH1:11815:0:10000::::
bin:*:8902:0:10000::::
ftp:*:13698::::::
admin:$6$D5erPv0R22YYfzej$tdTRE1BsTW83ms666Kx1LJv9OzK0KLcVrnndFRKm4fyencrD.4qJEglWmvwvL7oVPKV4ZxQ2ewIfHyaMqLcc40:18851:0:99999:7:::
ilinkacc:$6$ctryl3egNvnJkAg5$65tzRJNCrP..qbZBQsFKhgQ2DaSG7deQGP4wIOXd.Nq7BgDdiH9jEpweU2iNuIaWadJRA2FdKAFVVSV4/7Bt/1:18851:0:99999:7:::
cvtl:*:15307:0:99999:7:::
vxworks:zocwtJq4kWgu.:15766:0:10000::::