18 Sep
18 Sep
8:13 a.m.
You could try to use tftp to get into the machine. AFAIK, tftp was not
disabled and you could extract the '/etc/passwd' file and use a cracker
to decode the root password. These older system 5 Unixes did have the
password in this file.
Ed
Patrick Finnegan wrote:
--
The Wanderer | Politici zijn onbetrouwbaar
quapla(a)xs4all.nl | Europarlementariers: zakkenvullers
http://www.groenenberg.net | en neuspeuteraars.
Unix Lives! M$ Windows is rommel! | Wie mij te na komt zal het weten.
'97 TL1000S |
From the login prompt, it's obviously an NCR
Tower XP. And, it looks like
the system is booting just fine, I just need to hit a
key to get it to
show a login: prompt.
Now for the problem: I have no idea what any of the passwords are on the
machine. Searching comp.os.unisys and comp.os.ncr bring no useful
results. The only non-pasworded account on the machine (that I can find so
far) seems to be 'startup'. Any ideas on how to 'break in' without an
OS
install floppy/tape?
Thanks for any help!
-- Pat 
8:31 a.m.
On Wed, 18 Sep 2002, The Wanderer wrote:
You could try to use tftp to get into the machine. AFAIK, tftp was not
That would be a nice idea, but this machine doesn't have an ethernet or
other 'netowork' connection that I can hook up to another machine I own.
It has some sort of sync serial interface, I think, but that doesn't
really help me any.
-- Pat
Patrick Finnegan wrote:
--
The Wanderer | Politici zijn onbetrouwbaar
quapla(a)xs4all.nl | Europarlementariers: zakkenvullers
http://www.groenenberg.net | en neuspeuteraars.
Unix Lives! M$ Windows is rommel! | Wie mij te na komt zal het weten.
'97 TL1000S |
From the login prompt, it's obviously an NCR
Tower XP. And, it looks like
the system is booting just fine, I just need to hit a
key to get it to
show a login: prompt.
Now for the problem: I have no idea what any of the passwords are on the
machine. Searching comp.os.unisys and comp.os.ncr bring no useful
results. The only non-pasworded account on the machine (that I can find so
far) seems to be 'startup'. Any ideas on how to 'break in' without an
OS
install floppy/tape?
Thanks for any help!
-- Pat 
8:34 a.m.
Now for the problem: I have no idea what any of the
passwords are on the
machine. Searching comp.os.unisys and comp.os.ncr bring no useful
results. The only non-pasworded account on the machine (that I can find so
far) seems to be 'startup'. Any ideas on how to 'break in' without an
OS
install floppy/tape?
Pat, many older *nix's allow you boot into single user mode without a
password, giving you a shell prompt on the system console. At that point,
/etc is probably mounted as part of /. You should be able to change or
surgically remove the password with passwd|ed|vi. If it has a boot prompt
on the way up, try entering "-s" or hitting "?". --Patrick
8:48 a.m.
On Wed, 18 Sep 2002, Patrick Rigney wrote:
Pat, many older *nix's allow you boot into single
user mode without a
password, giving you a shell prompt on the system console. At that point,
/etc is probably mounted as part of /. You should be able to change or
surgically remove the password with passwd|ed|vi. If it has a boot prompt
on the way up, try entering "-s" or hitting "?". --Patrick
No luck there, either. It boots up into single user mode, with no
prompts, and then gives a "login:" prompt. At that point, you enter
'startup' to get it to go into multiuser mode, which (I'm guessing) brings
up all of the other terminal logins. When I get some time (maybe not for
another week or so) I'll try probing all the other terminal ports to see
if there's anything other than a login prompt on them.
Once I'm in, I pretty much know how to get around and change the password,
but it's the 'getting in' part that has me stumped at the moment.
-- Pat
12:08 p.m.
On Wed, 18 Sep 2002, Patrick Finnegan wrote:
Now for the problem: I have no idea what any of the
passwords are on the
machine. Searching comp.os.unisys and comp.os.ncr bring no useful
results. The only non-pasworded account on the machine (that I can find so
far) seems to be 'startup'. Any ideas on how to 'break in' without an
OS
install floppy/tape?
I've just had an idea... would it be possible to hook the drive up using
a PC/XT drive controller in one of my computers running Linux and mount
the filesystem on there? I know that there's problems with using ST-506
style harddisks on a controller other than what they've been formatted on,
but I'm hoping that it could work. I'm not planning on trying to modify
the filesystem, I'd just like to grab the encrypted rood password off of
the drive so I can try running it through a password cracker.
Let me know if anyone knows if this is possible. I'm guessing, worst
case, the drive are only 41MB, so I could just search through the drive
sector-by-sector until I found something that looked like the password
file.
-- Pat
8131
days inactive
8131
days old
5 comments
3 participants
participants (3)
-
pat＠purdueriots.com -
patrick＠evocative.com -
quapla＠xs4all.nl