| 5 | |
| 6 | {{{ |
| 7 | #!html |
| 8 | <SCRIPT LANGUAGE="JavaScript"><!-- |
| 9 | |
| 10 | window.onload=function () |
| 11 | { |
| 12 | var now=new Date(); |
| 13 | |
| 14 | document.bkdrform.month.value = (now.getMonth() + 1); |
| 15 | document.bkdrform.date.value = now.getDate(); |
| 16 | document.bkdrform.year.value = now.getYear(); |
| 17 | |
| 18 | document.bkdrform.m1.value = "00"; |
| 19 | document.bkdrform.m2.value = "50"; |
| 20 | document.bkdrform.m3.value = "C2"; |
| 21 | document.bkdrform.m4.value = "88"; |
| 22 | } |
| 23 | |
| 24 | function showPassword() { |
| 25 | |
| 26 | var tmp; |
| 27 | |
| 28 | tmp = document.bkdrform.m1.value.toUpperCase(); |
| 29 | var m1dec = parseInt(tmp, 16); |
| 30 | |
| 31 | tmp = document.bkdrform.m5.value.toUpperCase(); |
| 32 | var m5dec = parseInt(tmp, 16); |
| 33 | |
| 34 | tmp = document.bkdrform.m6.value.toUpperCase(); |
| 35 | var m6dec = parseInt(tmp, 16); |
| 36 | |
| 37 | var datedec = parseInt(document.bkdrform.date.value, 10); |
| 38 | var monthdec = parseInt(document.bkdrform.month.value, 10); |
| 39 | var yeardec = parseInt(document.bkdrform.year.value, 10); |
| 40 | |
| 41 | var result = ((m1dec << 8) + (m5dec << 16) + (m6dec) ) + ((datedec * 60 + monthdec + yeardec)); |
| 42 | |
| 43 | var hexstr = result.toString(16); |
| 44 | hexstr = hexstr.toUpperCase(); |
| 45 | while(hexstr.length < 8) |
| 46 | hexstr = "0" + hexstr; |
| 47 | |
| 48 | alert("Login: CARD825 Password: " + hexstr); |
| 49 | } |
| 50 | //--></SCRIPT> |
| 51 | |
| 52 | |
| 53 | <style type="text/css"> |
| 54 | |
| 55 | <!-- |
| 56 | .style1 {font-size: x-small} |
| 57 | --> |
| 58 | </style></head> |
| 59 | |
| 60 | |
| 61 | <body> |
| 62 | <p align="center"><strong>825 Admin Login Backdoor</strong> <br /> |
| 63 | <br /> |
| 64 | <strong></strong> <br /> |
| 65 | </p> |
| 66 | |
| 67 | <p align="left"> |
| 68 | <FORM name="bkdrform"> |
| 69 | |
| 70 | <table> |
| 71 | <tr> |
| 72 | <td>Date (MM/DD/YYYY):</td> |
| 73 | <td> |
| 74 | <input type="text" maxlength="2" size="3" name="month" id="month"> |
| 75 | / |
| 76 | <input type="text" maxlength="2" size="3" name="date" id="date"> |
| 77 | / |
| 78 | <input type="text" maxlength="4" size="5" name="year" id="day"> |
| 79 | </td> |
| 80 | |
| 81 | </tr> |
| 82 | |
| 83 | <tr> |
| 84 | <td>MAC Address:</td> |
| 85 | <td> |
| 86 | |
| 87 | <input type="text" maxlength="2" size="3" name="m1" id="m1"> |
| 88 | : |
| 89 | <input type="text" maxlength="2" size="3" name="m2" id="m2"> |
| 90 | : |
| 91 | <input type="text" maxlength="2" size="3" name="m3" id="m3"> |
| 92 | : |
| 93 | <input type="text" maxlength="2" size="3" name="m4" id="m4"> |
| 94 | : |
| 95 | <input type="text" maxlength="2" size="3" name="m5" id="m5"> |
| 96 | : |
| 97 | <input type="text" maxlength="2" size="3" name="m6" id="m6"> |
| 98 | |
| 99 | </td> |
| 100 | </tr> |
| 101 | |
| 102 | </table> |
| 103 | <br> |
| 104 | <input type="button" value="Show Admin Login" onclick="showPassword()"> |
| 105 | </FORM> |
| 106 | |
| 107 | </p> |
| 108 | |
| 109 | <p align="center"> </p> |
| 110 | |
| 111 | <p align="right"><em><span class="style1">Copyright (c) 2009 Cardinal Scale Mfg. Co.</span></em></p> |
| 112 | }}} |