moving story time around

This commit is contained in:
Conor Horan-Kates 2016-06-30 21:49:46 -07:00
parent 042ae9ec1f
commit 2a717ad841
2 changed files with 8 additions and 7 deletions

View File

@ -4,6 +4,14 @@ found this device in a conference room, found the IP from an unauthenticated men
## story time
from the page that loaded when you first hit http://<device>, i noticed `app.js`
in it, i found:
```json
sys.password:
- defaultVal: "7386",
- pattern: /^(\d{4,})$/,
```
## tools

View File

@ -1,12 +1,5 @@
#!/usr/bin/env ruby
## bf_login.rb - brute force the login for the revolabs flx UC 1000
#
# http://<device>/app/app.js exposes:
# sys.password:
# - defaultVal: "7386",
# - pattern: /^(\d{4,})$/,
#
# so when the default works, we only have to try 9998 other possibilities
require 'json'
require 'net/http'