74 lines
3.1 KiB
Plaintext
74 lines
3.1 KiB
Plaintext
Subject: What's Hacking VAX Special - 2
|
|
From: David Lightman (Level 30) [A dude who wanted access]
|
|
To: ALL
|
|
Sent: 3/1/90 at 2:49 pm
|
|
|
|
|
|
|
|
WHAT DOES A VAX LOOK LIKE: (quickly)
|
|
=========================
|
|
|
|
When you log into a VAX, you will see something similar to the
|
|
following:
|
|
|
|
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
|
|
WELCOME
|
|
|
|
TO THE
|
|
|
|
AT&T MICROVAX II SYSTEM
|
|
|
|
Username: (username here)
|
|
Password: (password here... does not echo)
|
|
|
|
$ (<-- this is your prompt)
|
|
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
|
|
|
|
You will know if you have a VAX type system if you get the
|
|
"Username:" and "Password:" prompts. Anything is just extra that
|
|
helps you guess passwords.
|
|
|
|
GETTING IN A VAX BY ERROR:
|
|
=========================
|
|
|
|
I will only tell you one thing here. VMS 4.X and especially
|
|
VMS4.4 are goldmines. I am not going to go into this at all,
|
|
because it is a lengthy explanation that doesn't fit in the scope
|
|
of this message. You can find this discussion on ARPANET and
|
|
USENET. You can also get this information on CompuServe
|
|
Information Service, BYTE Information Exchange, and Digital
|
|
Electronics Corporation's VAX BBS. There is also a big problem
|
|
with VMS 5.1, but that doesn't involve getting in. If there are
|
|
enough requests, I will cover this information in another mes-
|
|
sage.
|
|
|
|
GETTING IN A VAX BY DEFAULT:
|
|
===========================
|
|
|
|
There are several default accounts that were put in by DEC
|
|
when testing and installing the VAX. These accounts have pass-
|
|
words which don't change from system to system. The SYSOP should
|
|
have removed these accounts or changed the passwords, but it is
|
|
not done a lot of times. Below, I have listed several defaults:
|
|
|
|
USERNAME PASSWORD
|
|
-------- --------
|
|
DECNET DECNET
|
|
* SYSTEST UETP
|
|
SYSTEST
|
|
SYSTEM SYSTEM
|
|
DEFAULT DEFAULT
|
|
* FIELD FIELD
|
|
OPERATIONS OPERATIONS
|
|
* SUPPORT SUPPORT
|
|
DEC
|
|
SYSTEST_CLIG CLIG
|
|
SYSTEST
|
|
TEST
|
|
|
|
Where I have listed several passwords, I have found the re-
|
|
spective usernames passworded that way as much as the default
|
|
password. The accounts with asterisks beside them are powerful
|
|
accounts by default.
|
|
|