3COM Netbuilder
From Sfvlug
(Difference between revisions)
Revision as of 05:14, 30 January 2007
This box is a 1U 19" rack mountable router, found in a dumpster in Woodland Hills, CA. by DualDFlipFlop. The following information was collected by DualDFlipFlop and members of the San Fernando Valley Linux User Group.
Contents |
SERIAL CONSOL ACTIVITIES
Console Settings: 9600N81
Serial console boot log:
passed. Self Tests Passed
System boot in progress ... Primary then Secondary Loading file /primary/boot.68k uncompressed image File read - size 1473476 bytes load completed move completed checksum verified Running image - address 40D000 NETBuilder Loader Version 1.0 Decompressing brouter image... .................................................done Wed Dec 31 16:00:14 1969 Path 1 AVAILABLE Fri Feb 17 21:21:02 2006 System Initialized and Running Fri Feb 17 21:21:02 2006 Path 2 AVAILABLE
NOTE: During the boot up, through the 10BaseT we get some very strange frames, in fact, tcpdump just shows time stamps, and no other information.
Our login attempts..
NetLogin: Sorry // No idea what happened here @ NetLogin: // Ok, so we need a username... NetLogin: password // Not a password... Password: NetLogin: admin // admin / admin Password: NetLogin: admin // admin / password Password: NetLogin: root // Oh wait. root / password Password: Welcome to the Columbia Network // Don't worry that didn't spoil anything. [1]1sour_Los Rob# // SCORE!
No joke, the previous owners of this router used "root" as their root account, and "password" as their password.
Misc. note: console times out. Gives you an '@' and then you're done.
SecCheck [!<port>]
IpToDte [!<port>] <PDN type> <IP address>
DteToIp [!<port>] <PDN type> <DTE address>
-----------------------------RDP Service Commands------------------------------
DiscRouteRs [!<port> | <source IP>] [Broadcast] [<timeout (1 - 30 seconds)>]
-----------------------------CLNP Service Commands-----------------------------
OPING <NSAP address> [timeout (1-300 seconds)]
OTraceRoute <NSAP address>
-----------------------------IPX Service Commands------------------------------
NetwarePING &<network>%<host> [timeout (1-300 seconds)]
NetwareTraceRoute &<network>%<host>
NetwareTraceRoute &<network>%<host>
--<CR> to continue, Q to quit--
-----------------------------VIP Service Commands------------------------------
VPing <server addr>(decimal) [timeout (1-300 seconds)]
--------------------------AppleTalk Service Commands---------------------------
APING {<entity-name> | <node-address>} [timeout (1-300 seconds)]
ANameLookup <entity-name> [maxmatch]
----------------------------FIlter Service Commands----------------------------
CHange StationGroup <oldstationgroupname> <newstationgroupname>
---------------------------FireWall Service Commands---------------------------
REStart
TEst
-----------------------------BGP Service Commands------------------------------
SAVEbgp [All]
----------------------------DVMRP Service Commands-----------------------------
MRInfo <target IP> [!<port>] [<timeout (0-120 seconds)>]
MTraceRoute <source> <destination> [G <group>] [H <reports>] [!<port>]
[T <timeout>] [W <gateway>] [R <Resp addr>] [L <Resp ttl>]
[3]1sour_Los Rob#
Menu Command
Ok, so what is this "menu" command we hear about???
[3]1sour_Los Rob#menu ============================= Main menu (Level 1)============================== 1 - SYS ( System Service ) 2 - SCH ( Scheduling / Event-Based Macro Execution Services ) 3 - AuditLog ( AuditLog - Audit Log Service ) 4 - PROFile ( Profile Facility ) 5 - PATH ( Path - Physical Line Configurations ) 6 - PORT ( Port - Logical Networ 7 - BoundaryCN ( Boundary Routing at Central Node Configurations ) 8 - LAPB ( LAPB - Path Configurations ) 9 - PPP ( Point to Point Protocol ) 10 - FR ( Frame Relay - Port Configurations ) 11 - X25 ( X25 - Path Configurations ) 12 - SMDS ( SMDS - Port Configurations ) 13 - XSWitch ( X25 SWitch ) 14 - BRIDGE ( Bridge - Global Bridging Function ) 15 - STP ( Bridge - Spanning Tree Pro 16 - IP ( TCP/IP - Internet Protocol ) 17 - ARP ( TCP/IP - Address Resolution Protocol ) 18 - RDP ( TCP/IP - ICMP Router Discovery Protocol ) 19 - RIPIP ( TCP/IP - Routing Information Protocol ) 20 - OSPF ( TCP/IP - Open Shortest Path First ) 21 - IISIS ( TCP/IP - Integrated IS to IS routing protocol ) --<CR> to continue, Q to quit-- 22 - TCP ( TCP/IP - Transmission Control Protocol ) 23 - UDPHELP ( BOOTP/UDP/IP - Broadcast Helper ) 24 - BOOTPC ( BOOTP - Bootstrap Protocol Client Application ) 25 - SNMP ( TCP/IP - Simple Network Management Protocol ) 26 - CLNP ( OSI - ConnectionLess Network Protocol ) 27 - ESIS ( OSI - ES to IS routing protocol ) 28 - ISIS ( OSI - IS to IS routing protocol ) 29 - LLC2 ( LLC2 - IEEE 802.2 Data Link Control ) 30 - DLSW ( DLSw - Data Link Switching ) 31 - SDLC ( SDLC - SNA Port and CU Configurations ) 32 - SHDlc ( SHDlc - SDLC/HDLC Passthrough ) 33 - DECnet ( DECnet - Routing Protocol ) 34 - IDP ( XNS - Internet Datagram Protocol ) 35 - RIPXNS ( XNS - Routing Information Protocol ) 36 - NLSP ( IPX - NLSP routing protocol ) 37 - IPX ( IPX - Internet Packet Exchange Protocol ) 38 - NRIP ( IPX - Routing Information Protocol ) 39 - SAP ( IPX - Server Advertisement Protocol ) 40 - VIP ( VINES - Internet Protocol ) 41 - AppleTalk ( AppleTalk Routing Protocols ) 42 - FIlter ( Packet Filtering ) 43 - FireWall ( TCP/IP - IP FireWall ) 44 - BGP ( Border Gateway Protocol ) --<CR> to continue, Q to quit-- 45 - MIP ( TCP/IP - Multicast Routing Protocol ) 46 - DVMRP ( TCP/IP - Distance Vector Multicast Routing Protocol ) 47 - MOSPF ( TCP/IP - Multicast Open Shortest Path First ) Select (1-47) ... <CR> to Exit ===>
-? Command
Also, we tried -? as it suggested nicely:
[2]1sour_Los Rob#-? SYS Service ( System Service ) SCH Service ( Scheduling / Event-Based Macro Execution Services ) AuditLog Service ( AuditLog - Audit Log Service ) PROFile Service ( Profile Facility ) PATH Service ( Path - Physical Line Configurations ) PORT Service ( Port - Logical Network Configurations ) BoundaryCN Service ( Boundary Routing at Central Node Configurations ) LAPB Service ( LAPB - Path Configurations ) PPP Service ( Point to Point Protocol ) FR Service ( Frame Relay - Port Configurations ) X25 Service ( X25 - Path Configurations ) SMDS Service ( SMDS - Port Configurations ) XSWitch Service ( X25 SWitch ) BRIDGE Service ( Bridge - Global Bridgi STP Service ( Bridge - Spanning Tree Protocol ) IP Service ( TCP/IP - Internet Protocol ) ARP Service ( TCP/IP - Address Resolution Protocol ) RDP Service ( TCP/IP - ICMP Router Discovery Protocol ) RIPIP Service ( TCP/IP - Routing Information Protocol ) OSPF Service ( TCP/IP - Open Shortest Path First ) IISIS Service ( TCP/IP - Integrated IS to IS routing protocol ) TCP Service ( TCP/IP - Transmission Control Pr UDPHELP Service ( BOOTP/UDP/IP - Broadcast Helper ) BOOTPC Service ( BOOTP - Bootstrap Protocol Client Application ) SNMP Service ( TCP/IP - Simple Network Management Protocol ) CLNP Service ( OSI - ConnectionLess Network Protocol ) ESIS Service ( OSI - ES to IS routing protocol ) ISIS Service ( OSI - IS to IS routing protocol ) LLC2 Service ( LLC2 - IEEE 802.2 Data Link Control ) DLSW Service ( DLSw - Data Link Switching ) SDLC Service ( SDLC - SNA Port and CU Configurations ) SHDlc Service ( SHDlc - SDLC/HDLC Passthrough ) DECnet Service ( DECnet - Routing Protocol ) IDP Service ( XNS - Internet Datagram Protocol ) RIPXNS Service ( XNS - Routing Information Protocol ) NLSP Service ( IPX - NLSP routing protocol ) IPX Service ( IPX - Internet Packet Exchange Protocol ) NRIP Service ( IPX - Routing Information Protocol ) SAP Service ( IPX - Server Advertisement Protocol ) VIP Service ( VINES - Internet Protocol ) AppleTalk Service ( AppleTalk Routing Protocols ) FIlter Service ( Packet Filtering ) FireWall Service ( TCP/IP - IP FireWall ) BGP Service ( Border Gateway Protocol ) MIP Service ( TCP/IP - Multicast Routing Protocol ) DVMRP Service ( TCP/IP - Distance Vector Multicast Routing Protocol ) MOSPF Service ( TCP/IP - Multicast Open Shortest Path First ) --<CR> to continue, Q to quit-- [3]1sour_Los Rob#
Accessing said menus:
Type MENU <menucmd> for options. This is pretty standard across common hardware, nothing special here.
NOTE: The initial options given with MENU are actually just prefixes to command names.
e.g: type menu x25, get some options.. like x25protid. Instead of typing -- menu x25 x25protid you'd type: menu x25proti
In The End
This system was a fun one, especially finding out more about it and the people who used it through social engineering, which I unfortunatly can not provide you with the notes for. However, nobody got hurt and that's the important thing. Oh, and by the way, sorry for the huge list of menu items. Perhaps next time I will try for a different approach.
