General NAS-Central Forums

Welcome to the NAS community
It is currently Mon Mar 27, 2017 4:29 pm

All times are UTC




Post new topic Reply to topic  [ 10 posts ] 
Author Message
PostPosted: Tue Feb 10, 2009 4:08 pm 
Offline

Joined: Mon Oct 20, 2008 10:16 am
Posts: 5
Hi people,
i've just bought the edmini v2 (1 tb) which now contains all my mp3 collection (100gb), and it's served via upnp av to my noxon and mt-daapd to my itunes clients..
it works really well :)

nmap to it, i found that 3689 port is opened for web administration, but i got no password (i tried with classics, root root, admin admin, and so on but i got no results).
before begginning a neverending bruteforce, is there anyone that knows the password of mt-daapd server ??

twonkyserver is browsable to : http://EDMini_IP:9000/webbrowse but it does not allow to configure.

i'm interested to reconfigure to set the scan time to 1 week or manual..i do not understand how it's configurated now. (maybe file write trigger??)

i dont wanna open the drive not to lose the warranty.

thanks for your help
regards


Top
 Profile  
 
PostPosted: Thu Feb 12, 2009 10:19 pm 
Offline

Joined: Thu Feb 05, 2009 8:46 pm
Posts: 98
I would be very interested to have that password too, only for the LaCie Network Space (NS). Please post it here if you find your password, it might be the same as for the NS.

I think the EDmini has also has TwonkyMedia Server at port 9000 (not scanned by nmap by default). Find out how to easily hack your way into the config pages of version 4.4.6 here:

http://lacie.nas-central.org/wiki/Categ ... work_Space

Best,

Daan


Top
 Profile  
 
PostPosted: Fri Feb 13, 2009 9:33 am 
Offline

Joined: Mon Oct 20, 2008 10:16 am
Posts: 5
ok ;) i'll let you know if i find some result..
so i'm gonna start the bruteforce this weekend... i hope to get some good result.


Top
 Profile  
 
PostPosted: Fri Feb 13, 2009 10:34 am 
Offline

Joined: Thu Feb 05, 2009 8:46 pm
Posts: 98
Many people have opened their EDmini and have full access to the file system, so the password should be generally known. Google did not find it, tho'.

Anyway, good luck with guessing!


Top
 Profile  
 
PostPosted: Fri Feb 13, 2009 11:57 am 
Offline

Joined: Mon Jun 16, 2008 10:45 am
Posts: 5973
Quote:
so the password should be generally known
That is not true. In most cases only a hash of a password is stored. Such a hash algorithm is not reversable, so knowing the hash doesn't reveal anything.


Top
 Profile  
 
PostPosted: Fri Feb 13, 2009 12:54 pm 
Offline

Joined: Thu Feb 05, 2009 8:46 pm
Posts: 98
On my computer, the password for is stored in /etc/mt-daapd.conf like
Code:
#
# admin_pw (required)
#
# This is the password to the administrative pages
#

admin_pw = mt-daapd


Means we can read it, right? ;-)


Top
 Profile  
 
PostPosted: Sat Feb 28, 2009 3:29 pm 
Offline

Joined: Thu Feb 05, 2009 8:46 pm
Posts: 98
Peter found the pass/user for mt-daapd on the LaCie Networkspace (by opening the device):

username: admin
password: L@CieD@@pd

You have guessed that one, I'm sure.

(See also his post: viewtopic.php?f=221&t=606&p=2746&sid=7ecd31930aec091ad5a5be0d992fe1c6#p2746)


Top
 Profile  
 
PostPosted: Mon Mar 23, 2009 7:53 pm 
Offline

Joined: Mon Oct 20, 2008 10:16 am
Posts: 5
oh yeah! it works like a charm :)
thanks mates :)


Top
 Profile  
 
PostPosted: Mon Feb 28, 2011 4:22 pm 
Offline

Joined: Mon Feb 28, 2011 4:18 pm
Posts: 2
In my case the mtdaap password was:

admin_pw mtdaapd-lacie

So, just try them all...


Top
 Profile  
 
PostPosted: Tue May 10, 2011 12:05 pm 
Offline

Joined: Sat May 29, 2010 6:37 pm
Posts: 160
LaCie also uses this variant: mtd@@pd-l@cie, as was the case on several LaCie NAS devices I own.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group