Newsgroup: it.comp.sicurezza.varie
Titolo: Recuperare password di un convertitore COM/ETH

Ciao a tutti,
scusate l'OT ma non so quale possa essere il gruppo giusto per questa "cosa strana".
In azienda abbiamo un SNMP agent per un UPS ( tipo questo:
http://www.megatec.com.tw/Product_list.htm#NetAgent%20Mini
esattamente il modello DK522 ormai fuori produzione credo)
Il problema nasce dal fatto che non ricordiamo più la password per accedere e 
dovremmo modificare la configurazione per aggiungere dei destinatari di posta e 
modificare alcune mib.
Sono 2 giorni che provo tutte la password che usiamo solitamente più quelle di 
default dei vari cazzabubbolini simili ma non c'è verso.
Qualcuno ha suggerimenti per aggirare il problema o dobbiamo proprio acquistarne 
un altro ?
Allego un nmap dell'oggetto.
Grazie in anticipo.
Rizio
Interesting ports on 
172.31.1.240
:
Not shown: 1713 closed ports
PORT   STATE SERVICE VERSION
21/tcp open  ftp?
80/tcp open  http?
2 services unrecognized despite returning data. If you know the service/version, 
please submit the following fingerprints at 
http://www.insecure.org/cgi-bin/servicefp-submit.cgi
 :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port21-TCP:V=4.62%I=7%D=12/7%Time=4CFE4514%P=i686-pc-linux-gnu%r(NULL,2
SF:0,"220\x20Service\x20ready\x20for\x20new\x20user\r\n")%r(GenericLines,4
SF:4,"220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'\r\n\r\n':c
SF:ommand\x20not\x20understood\.\r\n")%r(Help,44,"220\x20Service\x20ready\
SF:x20for\x20new\x20user\r\n500\x20'HELP':command\x20not\x20understood\.\r
SF:\n")%r(GetRequest,44,"220\x20Service\x20ready\x20for\x20new\x20user\r\n
SF:500\x20'GET\x20':command\x20not\x20understood\.\r\n")%r(HTTPOptions,44,
SF:"220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'OPTI':command
SF:\x20not\x20understood\.\r\n")%r(RTSPRequest,44,"220\x20Service\x20ready
SF:\x20for\x20new\x20user\r\n500\x20'OPTI':command\x20not\x20understood\.\
SF:r\n")%r(RPCCheck,41,"220\x20Service\x20ready\x20for\x20new\x20user\r\n5
SF:00\x20'\x80':command\x20not\x20understood\.\r\n")%r(DNSVersionBindReq,4
SF:0,"220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'':command\x
SF:20not\x20understood\.\r\n")%r(DNSStatusRequest,40,"220\x20Service\x20re
SF:ady\x20for\x20new\x20user\r\n500\x20'':command\x20not\x20understood\.\r
SF:\n")%r(SSLSessionReq,42,"220\x20Service\x20ready\x20for\x20new\x20user\
SF:r\n500\x20'\x16\x03':command\x20not\x20understood\.\r\n")%r(SMBProgNeg,
SF:40,"220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'':command\
SF:x20not\x20understood\.\r\n")%r(X11Probe,41,"220\x20Service\x20ready\x20
SF:for\x20new\x20user\r\n500\x20'l':command\x20not\x20understood\.\r\n")%r
SF:(FourOhFourRequest,44,"220\x20Service\x20ready\x20for\x20new\x20user\r\
SF:n500\x20'GET\x20':command\x20not\x20understood\.\r\n")%r(LPDString,44,"
SF:220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'\x01def':comma
SF:nd\x20not\x20understood\.\r\n")%r(LDAPBindReq,44,"220\x20Service\x20rea
SF:dy\x20for\x20new\x20user\r\n500\x20'0\x0c\x02\x01':command\x20not\x20un
SF:derstood\.\r\n")%r(SIPOptions,44,"220\x20Service\x20ready\x20for\x20new
SF:\x20user\r\n500\x20'OPTI':command\x20not\x20understood\.\r\n")%r(LANDes
SF:k-RC,44,"220\x20Service\x20ready\x20for\x20new\x20user\r\n500\x20'TNMP'
SF::command\x20not\x20understood\.\r\n")%r(TerminalServer,41,"220\x20Servi
SF:ce\x20ready\x20for\x20new\x20user\r\n500\x20'\x03':command\x20not\x20un
SF:derstood\.\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=4.62%I=7%D=12/7%Time=4CFE4514%P=i686-pc-linux-gnu%r(HTTPOp
SF:tions,123,"HTTP/1\.1\x20501\x20Not\x20Implemented\r\nDate:\x20Mon,\x200
SF:1\x20Jan\x202001\x2001:37:51\x20GMT\r\nServer:\x20HTTPsrv\r\nConnection
SF::\x20close\r\nContent-Type:\x20text/html;\x20charset=ISO-8859-1\r\n\r\n
SF:<HTML><HEAD><TITLE>501\x20Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>
SF:501\x20Not\x20Implemented</H1>\nPOST\x20to\x20non-script\x20is\x20not\x
SF:20supported\.\n</BODY></HTML>\n")%r(RTSPRequest,123,"HTTP/1\.1\x20501\x
SF:20Not\x20Implemented\r\nDate:\x20Mon,\x2001\x20Jan\x202001\x2001:37:51\
SF:x20GMT\r\nServer:\x20HTTPsrv\r\nConnection:\x20close\r\nContent-Type:\x
SF:20text/html;\x20charset=ISO-8859-1\r\n\r\n<HTML><HEAD><TITLE>501\x20Not
SF:\x20Implemented</TITLE></HEAD>\n<BODY><H1>501\x20Not\x20Implemented</H1
SF:>\nPOST\x20to\x20non-script\x20is\x20not\x20supported\.\n</BODY></HTML>
SF:\n")%r(FourOhFourRequest,17B,"HTTP/1\.1\x20505\x20HTTP\x20Version\x20No
SF:t\x20Supported\r\nDate:\x20Mon,\x2001\x20Jan\x202001\x2001:37:56\x20GMT
SF:\r\nServer:\x20HTTPsrv\r\nConnection:\x20close\r\nContent-Type:\x20text
SF:/html;\x20charset=ISO-8859-1\r\n\r\n<HTML><HEAD><TITLE>505\x20HTTP\x20V
SF:ersion\x20Not\x20Supported</TITLE></HEAD>\n<BODY><H1>505\x20HTTP\x20Ver
SF:sion\x20Not\x20Supported</H1>\nHTTP\x20versions\x20other\x20than\x201\.
SF:1\x20is\x20not\x20supported\.\n<p><p>Version\x20encountered:\x20:O\xc8\
SF:xac\xe5\x9f\xf1L\xe5\x9f\xf1L<p><p></BODY></HTML>\n")%r(GenericLines,12
SF:9,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2001\x20Jan\x20
SF:2001\x2001:37:56\x20GMT\r\nServer:\x20HTTPsrv\r\nConnection:\x20close\r
SF:\nContent-Type:\x20text/html;\x20charset=ISO-8859-1\r\n\r\n<HTML><HEAD>
SF:<TITLE>400\x20Bad\x20Request</TITLE></HEAD>\n<BODY><H1>400\x20Bad\x20Re
SF:quest</H1>\nYour\x20client\x20has\x20issued\x20a\x20malformed\x20or\x20
SF:illegal\x20request\.\n</BODY></HTML>\n")%r(Help,129,"HTTP/1\.1\x20400\x
SF:20Bad\x20Request\r\nDate:\x20Mon,\x2001\x20Jan\x202001\x2001:38:11\x20G
SF:MT\r\nServer:\x20HTTPsrv\r\nConnection:\x20close\r\nContent-Type:\x20te
SF:xt/html;\x20charset=ISO-8859-1\r\n\r\n<HTML><HEAD><TITLE>400\x20Bad\x20
SF:Request</TITLE></HEAD>\n<BODY><H1>400\x20Bad\x20Request</H1>\nYour\x20c
SF:lient\x20has\x20issued\x20a\x20malformed\x20or\x20illegal\x20request\.\
SF:n</BODY></HTML>\n");
MAC Address: 00:03:EA:00:D6:C9 (Mega System Technologies)
Device type: switch
Running: 3Com embedded
OS details: 3Com SuperStack 3 Switch 4300
-- 
Si vis pacem para bellum

 OS details: 3Com SuperStack 3 Switch 4300
Sicuro? 8-o
Ciao
Luca

 Sicuro? 8-o
Si, ha tratto in inganno anche me, ma conoscendo come lavora nmap mi 
tranquillizzo (anche perchè sono certo dell'ip).
Rizio
