@ryanc Honeycrisp is my favorite now
Posts
-
Red Delicious apples? -
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?always fun when running strings on a piece of firmware and you find:
user:s7C9Cx.rLsWFA
var:jhl3iZAe./qXM
admin:uoCbM.VEiKQto -
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@morb Oh neat, does this URL work on your phone?
/servlet?p=hidden
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@morb @tychotithonus my head was in the same place - the "diagnosis" page that apparently had straight up shell injection isn't in the firmware I'm running on this phone, and now I'm digging into some of the MACADDRESS.cfg provisioning files and related XML translation on the phone checking what gets (ab)used by grep into shell variables, etc.
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@morb @tychotithonus mmm whelp I bumped up the logging level through config, and I see when I try to telnet in with root/toor/admin/yealink any username all results in:
login[480]: invalid password for 'UNKNOWN' on 'pts/0'
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@tychotithonus dunno what is in the /yealink/config filesystem yet. Haven't found a way into the device yet. I *did* manage to figure out how to enable telnet, through config it fetches via provisioning.
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@tychotithonus cool, thank you. I appreciate it, this is an area I'm not well versed in
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?@tychotithonus if you want to poke at it, here you go -- this is for a Yealink SIP phone. Strings in the firmware nearby suggest the password is
YealinkPhone1106
but it doesn't seem to work on my hardware; which might be due to the fact that there's a config partition that overlay mounts a shadow file overtop of /etc/shadow from the ROM:root:$1$.jKlhz0B$/Nmgj0klrsZk0nYc1BLUR/:11876:0:99999:7:::
-
Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?
-
Oh, I found a framework for writing SSH servers in Rust. -
Oh, I found a framework for writing SSH servers in Rust.@ryanc what I'm hearing is you and mjg are going to make a lot of people regret this as you both perform unspeakable acts (ab)using ssh
-
There's some ventilation holes that need to be cut so fans can be mounted, which will make a mess, so I'm not actually mounting the router and switch yet, just configuring them.@ryanc don't forget rack chassis grounding!
-
Need to post rack pics. WIP.@ryanc [the only time I will ever be comfortable saying this]
Nice rack!