Sign in to follow this  
Followers 0
rgiles18

Web form password script.

4 posts in this topic

I purchased 3 used SAN Fibre Switches. The default passwords have been changed. The seller doesn't know what the passwords are.

Things I know:

The IP is: 192.168.1.129

I can connect by RS-232, Telnet and web page.

The default was "password" from the factory but not now.

The web page source is(before trying a password):

<html>

<head><link rel='stylesheet' href='../style/greyfox.css' type='text/css'></head><BODY onload="document.fSubmit.pw.focus();">

<H1>Enter Password:</H1>

<I>Password is case-sensitive</I>

<SCRIPT TYPE="text/javascript"><!--

function encrypt(textString) {

var mask = new String("C/PK.GhG~g{#}sY{1Lm!#T7U&:XtbbjL8Rqc=%:h RgnKO#y->E");

var returnString = new String();

var enChar; var hexChar;

for (var i=0; i < textString.length; ++i) {

enChar = textString.charCodeAt(i) ^ mask.charCodeAt(i);

hexChar = escape(enChar.toString(16));

if (hexChar.length == 1) {

returnString += '+0' + hexChar;

} else {

returnString += '+' + hexChar;

}

}

return returnString;

}

--></SCRIPT>

<FORM NAME="fSubmit" ACTION="/goform/vFormValidatePassword" METHOD="POST" ENCTYPE="multipart/form-data">

<INPUT TYPE="Password" NAME="pw" SIZE="12" onchange="document.cookie='cipher='+ encrypt(this.value)+';path=/';this.value=''; return document.fSubmit.submit();">

<INPUT TYPE="Button" VALUE="Log In"> <INPUT TYPE="Hidden" NAME="MyLocation" VALUE="http%3A%2F%2F192.168.1.129%2Fasp%2Fpassword.asp">

<INPUT TYPE="Hidden" NAME="returnPath" VALUE="vFormLogin">

</FORM>

</body>

</html>

After failed password:

<html>

<head><link rel='stylesheet' href='../style/greyfox.css' type='text/css'></head><BODY onload="document.fSubmit.pw.focus();">

<H2>Password invalid. Please re-enter password:</H2>

<I>Password is case-sensitive</I>

<SCRIPT TYPE="text/javascript"><!--

function encrypt(textString) {

var mask = new String("3_&] N-2%VXC3|eTDpw|'k@mV@n/V;z)MJwYk&Q93yy#G}&I,N");

var returnString = new String();

var enChar; var hexChar;

for (var i=0; i < textString.length; ++i) {

enChar = textString.charCodeAt(i) ^ mask.charCodeAt(i);

hexChar = escape(enChar.toString(16));

if (hexChar.length == 1) {

returnString += '+0' + hexChar;

} else {

returnString += '+' + hexChar;

}

}

return returnString;

}

--></SCRIPT>

<FORM NAME="fSubmit" ACTION="/goform/vFormValidatePassword" METHOD="POST" ENCTYPE="multipart/form-data">

<INPUT TYPE="Password" NAME="pw" SIZE="12" onchange="document.cookie='cipher='+ encrypt(this.value)+';path=/';this.value=''; return document.fSubmit.submit();">

<INPUT TYPE="Button" VALUE="Log In"> <INPUT TYPE="Hidden" NAME="MyLocation" VALUE="%2Fasp%2Fhome.asp">

<INPUT TYPE="Hidden" NAME="returnPath" VALUE="vFormLogin">

</FORM>

</body>

</html>

I'm certainly not as smart as you guy's on scripting and would like some help on the fastest way to get the passwords. I did find some word lists that I could try after I get the right script to use them with.

I would appreciate any help I can get on this.

Share this post


Link to post
Share on other sites



I know many of the routers and modems I've had, have had a factory reset button on them. look for a small pinhole (typically by the power switch or dc plug)

As for a script to "crack" the password, check out the forum rules.


010101000110100001101001011100110010000001101001011100110010000

001101101011110010010000001110011011010010110011100100001

My Android cat and mouse game
https://play.google.com/store/apps/details?id=com.KaosVisions.WhiskersNSqueek

We're gonna need another Timmy!

Share this post


Link to post
Share on other sites

I have taken one of them completely apart and no reset button or jumper anywhere. They were made in 2004 so HP will no longer provide any information.

Share this post


Link to post
Share on other sites

Try doing a google search on the model of the switch and using "password reset", you should find numerous sites that have the information you need.I found this document Supporting Fabric OS v2.6.x, v3.1.x, v4.x, v5.x for example for some of their models.


If I posted any code, assume that code was written using the latest release version unless stated otherwise. Also, if it doesn't work on XP I can't help with that because I don't have access to XP, and I'm not going to.
Give a programmer the correct code and he can do his work for a day. Teach a programmer to debug and he can do his work for a lifetime - by Chirag Gude
How to ask questions the smart way!

I hereby grant any person the right to use any code I post, that I am the original author of, on the autoitscript.com forums, unless I've specifically stated otherwise in the code or the thread post. If you do use my code all I ask, as a courtesy, is to make note of where you got it from.

Back up and restore Windows user files _Array.au3 - Modified array functions that include support for 2D arrays.  -  ColorChooser - An add-on for SciTE that pops up a color dialog so you can select and paste a color code into a script.  -  Customizable Splashscreen GUI w/Progress Bar - Create a custom "splash screen" GUI with a progress bar and custom label.  -  _FileGetProperty - Retrieve the properties of a file  -  SciTE Toolbar - A toolbar demo for use with the SciTE editor  -  GUIRegisterMsg demo - Demo script to show how to use the Windows messages to interact with controls and your GUI.  -   Latin Square password generator

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0