Can't change the password without the password, but you can export in
plain text all the important rules and copy and paste them out of the
system before reset and that would get him by. So yes looking
everywhere for a recent addresses file would be important. But I'm
guessing with this being done for spite, he did it by hand. When this
was done in California, a company successfully went to the law and the
law went to a judge and the judge issued something that compelled said
offender to log into the machines to undo what he did. He later went
to jail over it, but that was after unlocking the machines. I would go
that route asap.
On 11/09/2016 07:52 AM, Ken Hohhof wrote:
OK, I am lazy, which means I use Winbox, and it has the password stored for
every Mikrotik I manage. Plus I use Winbox on several computers - laptops,
desktops, and computers I remote into. I take it this guy was not similarly
lazy? If I was the fired ex-admin, all you would need is to find one of the
computers I used Winbox on. Even if it's not possible to decrypt the stored
passwords, you could Winbox into every Mikrotik and change the password.
I guess real men use SSH and the CLI. Oh, and don't store the credentials in
their SSH client.
Note, it appears Winbox 3 stores the passwords as cleartext in settings.cfg.viw.
-----Original Message-----
From: Af [mailto:[email protected]] On Behalf Of Butch Evans
Sent: Wednesday, November 9, 2016 9:10 AM
To: [email protected]
Subject: Re: [AFMUG] Mikrotik Password reset for inherited network
On Wed, 2016-11-09 at 00:24 +0000, Brett A Mansfield wrote:
I was able to find the backups. Sadly they are running v6.36.
If I default it can I restore its config and change the password or
will it apply the old one?
Google for "mtpass". That will find the passwords in the backup file.
If these backups contain the "old" OR the "new" password, when you
default/restore the backup, the password will be whatever is in that file.
--
Butch Evans
Training and Support for WISPs
702-537-0979
http://store.wispgear.net/
http://www.butchevans.com/