Juniper高端路由器Root密码怎么破解

Juniper高端路由器Root密码怎么破解

  今天为大家分享一篇关于:Juniper高端路由器Root密码如何破解的教程:

  Here,I take MX 960 as an example...

  1.Reboot the system...

  2.From console ,interrupt the boot routine...

  Loading /boot/loader

  Consoles: serial port

  BIOS drive C: is disk0

  BIOS drive D: is disk1

  BIOS 622kB/3392176kB available memory

  ...

  ...

  ...

  /boot/modules/mac_pcap.ko size 0x1878 at 0xdf8000

  Hit [Enter] to boot immediately, or space bar for command prompt.

  Booting [/kernel] in 5 second...(sometimes the waittime is changeable)

  3.

  Type '?' for a list of commands, 'help' for more detailed help.

  OK

  4.Enter into the single-user mode Type into :boot -s (and press Enter...

  platform_early_bootinit: M/T Series Early Boot Initialization

  GDB: debug ports: sio

  ...

  ...

  ...

  5.If you have the following system output ,enter :recovery ,and hit Enter and skip to step 9

  System watchdog timer disabled

  Enter full pathname of shell or 'recovery' for root password recovery or RETURN for /bin/sh: recovery

  6.Enter the shell:

  System watchdog timer disabled

  Jan 1 00:36:47 init: /etc/spwd.db: No such file or directory

  Enter full pathname of shell or RETURN for /bin/sh:

  7.Mount the virtual file systems .(Note that it is not necessary to mount the jbase package ;however the other packages still need to be mounted):

  Note:To go to multi-user operation,exit the sing-user shell(with ctrl+D )

  # cd /packages

  # ./mount jbase

  Mounted jbase package on /dev/vn1...

  # ./mount jkernel

  Mounted jkernel package on /dev/vn2...

  # ./mount jroute

  Mounted jroute package on /dev/vn3...

  8.Enter the recovery mode :

  # /user/libexec/ui/recovery-mode

  9.Enter configure mode and change the root authentication password:

  root>edit

  Entering the configuration mode

  [edit]

  root# set system root-authentication plain-text-password

  New password: Juniperlab

  Retry new password:Juniperlab

  10.Commit the changes ,and exit configuration mode

  [edit]

  # commit

  commit complete

  [edit]

  # exit

  Exiting configuration mode

  root@router>exit

  11.Exit recovery mode and enter 'y'when promted to reboot the system:

  Reboot the system? [y/n] y

  Terminated

  The system now reboots and changes made to root authentication are activated.

  我用的是一台现网中的核心高端路由器MX 960做的。。。

  1.重启MX960,通过console线(RJ-45转DB9接口)连到路由器

  2.当出现下面的提示时,快速按下空格键(有时候设置的等待时间不一样)

  Hit [Enter] to boot immediately, or space bar for command prompt.

  Booting [/kernel] in 5 second...

  3.让其自动加载,当出现下面提示时,输入:(空格)boot -s

  Type '?' for a list of commands, 'help' for more detailed help.

  OK

  4.回车;然后输入:recovery 回车,让其自动启动。

  启动过程中会提示缺少或无法在指定默认目录下找到系统密码所在db文件,所以要手动创建;上面有创建方法和相应的操作步骤

  5.进入恢复模式:

  # /user/libexec/ui/recovery-mode

  6.创建新的管理密码:

  。。。(上面有操作方法和步骤。。不详述)

  7.保存配置,退出。

  8.重启系统,即可完成密码破解。

推荐阅读