破解“思科pix515E”硬件防火牆進入特權模式的密碼

1.首先需要到天空軟件站下載“Cisco TFTP Server”,作爲防火牆從電腦提取密碼恢復文件之用;以及到思科網站下載密碼恢復文件“np70.bin”,網址是http://www.cisco.com/en/US/products/hw/***devc/ps2030/products_password_recovery09186a008009478b.shtml

2.使用配置線連接電腦串口和防火牆console口,用於通過“超級終端”配置防火牆;此外需要一條交叉網線連接電腦網口和防火牆ethernet0口,用於防火牆從TFTP Server獲取“np70.bin”。

3.將電腦ip設爲:
10.67.207.120
255.255.255.0
10.67.207.1

4.運行“思科 TFTP 服務器”,無需任何設置,直接將其最小化。

5.運行“超級終端”,在com1屬性端口設置中點“還原爲默認值”,再點確定,此時已經進入了用戶模式pixfirewall>。如看不到提示符,可按一下回車鍵。

6.重啓防火牆,在屏幕上出現倒計時的時候馬上按Ctrl+Break鍵,進入到ROM監視模式monitor>。

7.以下是對防火牆的配置過程:
monitor> interface 0
0: i8255X @ PCI(bus:0 dev:14 irq:10)
1: i8255X @ PCI(bus:0 dev:13 irq:11)

Using 0: i82557 @ PCI(bus:0 dev:14 irq:10), MAC: 001c.58b5.73b8
monitor> address 10.67.207.1
address 10.67.207.1
monitor> server 10.67.207.120
server 10.67.207.120
monitor> file np70.bin
file np70.bin
monitor> ping 10.67.207.120
Sending 5, 100-byte 0x9480 ICMP Echoes to 10.67.207.120, timeout is 4 seconds:
!!!!!
Success rate is 100 percent (5/5)
monitor> tftp
tftp [email protected]
.....................................................
................................................................................
................................................................................
........................................
Received 129024 bytes

Cisco PIX Security Appliance password tool (3.0) #0: Thu Jun 9 21:45:44 PDT 2005

Initializing flashfs...
flashfs[0]: 6 files, 3 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 16128000
flashfs[0]: Bytes used: 5131264
flashfs[0]: Bytes available: 10996736
flashfs[0]: Initialization complete.
Using the default startup configuration

Do you wish to erase the passwords? y/n [n]: y
The following lines will be removed from the configuration:
        enable password M6j8Z8OZss573zTI encrypted
        passwd 2KFQnbNIdI.2KYOU encrypted

Do you want to remove the commands listed above from the configuration? y/n [n]y
Passwords and aaa commands have been erased.

Rebooting....

8.最後驗證一下:
pixfirewall> enable
Password:   //密碼爲空,直接回車
pixfirewall#   //成功了!!

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章