华为Eudemon 100E的密码恢复

Eudemon 100E系统的初始用户名和密码都是“eudemon”,Siumem这边却有一台Eudemon100E却用初始用户名和密码却怎么也进不去，该怎么处理呢，反正思科的华为的都差不多，破解吧：

Eudemon启动时有进BOOTROM的选项：
Go on Checking the Sdram? Yes or No(Y/N):
Press CTRL+A to Stop AutoBoot!
Starting...
Decompressing ....Done!
Be Sure The Baudrate Be Set To 9600bps!

 

      *******************************************************
      *                                                     *
      *      Firewall Platform E100E Bootrom, Ver01.11      *
      *                                                     *
      *******************************************************

      Copyright(C) 2001-2005 by HUAWEI TECHNOLOGIES CO.,LTD.
      Creation date: Aug  4 2008, 15:19:10

      CPU type        : IBM750FX
      CPU L2 Cache    : 512KB
      CPU Clock Speed : 733MHz
      Memory Size     : 256MB

Press Ctrl+B to Enter Boot Menu... 3
    SIUMEM用的是SecureCRT，用Ctrl+B却一直进不去BOOTROM，甚至还怀疑是不是B要大写。后来换了WINDOWS自带的超级终端就好了。
    进BOOTROM要密码，华为的BOOTROM密码千奇百怪，诸如：“WhiteLily 2970013” ，“8060bps”，“ 8060” 等等不一而足，估计这个由开发人员随心制定，这是华为早期产品的一大特点，产品规范不严。Eudemon也随版本不同而BOOTROM密码不同，有为空的，有用8060的。我用8060进去了：
Password:

==========================================
| <1> Boot With Default Mode                                |
| <2> Boot From Flash                                       |
| <3> Enter Serial SubMenu                                  |
| <4> Enter Ethernet SubMenu                                |
| <5> Change Flash Boot File                                |
| <6> Modify Bootrom Password                               |
| <7> Reboot                                                |
=============================================================
Enter your choice(1-7): 3
    进去一看，傻眼了，哪有关于密码的选项啊，1—6选项都试过了，一点思路也没有，google了一下，原来要按Ctrl＋Z进入隐含菜单：
Hidden Menu...

============================================
| <1> Enter Debugging Environment                           |
| <2> Erase Flash                                           |
| <3> Delete file from Flash                                |
| <4> Upgrade Small BootRom                                 |
| <5> Upgrade South-Bridge Logic                            |
| <6> Display Flash Files                                   |
| <7> Enter Flash-Aging Test                                |
| <8> Recover console0 password...                          |
| <9> Exit To Main Menu                                     |
=============================================================
    按6去删除配置文件,或者按8清除console0的密码的：

Enter your choice(1-9): 8

Recover console0 password...
Done,please reboot and change reset your password on next login!

============================================
| <1> Enter Debugging Environment                           |
| <2> Erase Flash                                           |
| <3> Delete file from Flash                                |
| <4> Upgrade Small BootRom                                 |
| <5> Upgrade South-Bridge Logic                            |
| <6> Display Flash Files                                   |
| <7> Enter Flash-Aging Test                                |
| <8> Recover console0 password...                          |
| <9> Exit To Main Menu                                     |
=============================================================

    回到主菜单，reset Eudemon
Enter your choice(1-9): 9


==========================================
| <1> Boot With Default Mode                                |
| <2> Boot From Flash                                       |
| <3> Enter Serial SubMenu                                  |
| <4> Enter Ethernet SubMenu                                |
| <5> Change Flash Boot File                                |
| <6> Modify Bootrom Password                               |
| <7> Reboot                                                |
=============================================================
Enter your choice(1-7): 7

Rebooting...
    成功进入系统，重新设备密码认证：
[Eudemon]aaa
[Eudemon-aaa]local-user admin password cipher M\[BD<8]%V6^./X:8.FDX!!!
[Eudemon-aaa]local-user admin level 3
[Eudemon-aaa]local-user admin service-type terminal
[Eudemon]user-interface con 0
[Eudemon-ui-console0]authentication-mode aaa

成了，呵呵，华为的防火墙eudemon，就是一道门呀，呵呵。