Juniper高端路由器Root密码如何破解

　　今日为大伙儿分享一篇有关：Juniper高端路由器Root密码如何破解的教程：

　　Here,I take MX 960 as an example...

　　1.Reboot the system...

　　2.From console ,interrupt the boot routine...

　　Loading /boot/loader

　　Consoles: serial port

　　BIOS drive C: is disk0

　　BIOS drive D: is disk1

　　BIOS 622kB/3392176kB available memory

　　...

　　...

　　...

　　/boot/modules/mac_pcap.ko size 0x1878 at 0xdf8000

　　Hit [Enter] to boot immediately, or space bar for command prompt.

　　Booting [/kernel] in 5 second...(sometimes the waittime is changeable)

　　3.

　　Type '?' for a list of commands, 'help' for more detailed help.

　　OK

　　4.Enter into the single-user mode Type into :boot -s (and press Enter...

　　platform_early_bootinit: M/T Series Early Boot Initialization

　　GDB: debug ports: sio

　　...

　　...

　　...

　　5.If you have the following system output ,enter :recovery ,and hit Enter and skip to step 9

　　System watchdog timer disabled

　　Enter full pathname of shell or 'recovery' for root password recovery or RETURN for /bin/sh: recovery

　　6.Enter the shell:

　　System watchdog timer disabled

　　Jan 1 00:36:47 init: /etc/spwd.db: No such file or directory

　　Enter full pathname of shell or RETURN for /bin/sh:

　　7.Mount the virtual file systems .(Note that it is not necessary to mount the jbase package ;however the other packages still need to be mounted):

　　Note:To go to multi-user operation,exit the sing-user shell(with ctrl D )

　　# cd /packages

　　# ./mount jbase

　　Mounted jbase package on /dev/vn1...

　　# ./mount jkernel

　　Mounted jkernel package on /dev/vn2...

　　# ./mount jroute

　　Mounted jroute package on /dev/vn3...

　　8.Enter the recovery mode :

　　# /user/libexec/ui/recovery-mode

　　9.Enter configure mode and change the root authentication password:

　　root>edit

　　Entering the configuration mode

　　[edit]

　　root# set system root-authentication plain-text-password

　　New password: Juniperlab

　　Retry new password:Juniperlab

　　10.Commit the changes ,and exit configuration mode

　　[edit]

　　# commit

　　commit complete

　　[edit]

　　# exit

　　Exiting configuration mode

　　root@router>exit

　　11.Exit recovery mode and enter 'y'when promted to reboot the system:

　　Reboot the system? [y/n] y

　　Terminated

　　The system now reboots and changes made to root authentication are activated.

　　我就用的是一台现网中的关键高端路由器MX 960做的。。。

　　1.重新启动MX960，根据console线(RJ-45转DB9插口)连到无线路由器

　　2.当发生下边的提醒时，迅速按住空白键(有时设定的等待的时间不一样)

　　Hit [Enter] to boot immediately, or space bar for command prompt.

　　Booting [/kernel] in 5 second...

　　3.让其全自动载入，当发生下边提醒时，键入：(空格符)boot -s

　　Type '?' for a list of commands, 'help' for more detailed help.

　　OK

　　4.回车键;随后键入：recovery 回车键，让其自动启动。

　　运行流程中会提醒缺乏或没法在特定默认设置文件目录下寻找系统软件密码所属db文件，因此要手动式建立;上边有建立方式和相对应的操作过程

　　5.进到恢复模式：

　　# /user/libexec/ui/recovery-mode

　　6.建立新的管理方法密码：

　　。。。(上边有操作步骤和流程。。不详细描述)

　　7.储存配备，撤出。

　　8.重新启动系统软件，就可以进行密码破译。