Catalyst3560密码破解

1、关机；
2、将设备MODE键按住，然后开机，进入switch：
switch: flash_init
Initializing Flash...
flashfs[0]: 7 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 15998976
flashfs[0]: Bytes used: 12770304
flashfs[0]: Bytes available: 3228672
flashfs[0]: flashfs fsck took 9 seconds.
...done Initializing Flash.

switch: load_helper
Unknown cmd: load_helper

switch:
3、switch: rename flash:config.text flash:config.old
将配置文件重命名为config.old。
switch: dir flash:/
Directory of flash://

2  -rwx  12749781  <date>               c3560-ipservicesk9-mz.122-55.SE8.bin
    3  -rwx  4076      <date>               config.old
    4  -rwx  5198      <date>               switch-confg
    5  -rwx  916       <date>               vlan.dat
    6  -rwx  3096      <date>               multiple-fs
    9  drwx  0         <date>               online_diag
   10  -rwx  24        <date>               private-config.text
3233280 bytes available (12765696 bytes used)
4、switch: boot
然后交换机开始启动，进入后没有密码。
switch: boot
Loading "flash:/c3560-ipservicesk9-mz.122-55.SE8.bin"...@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
File "flash:/c3560-ipservicesk9-mz.122-55.SE8.bin" uncompressed and installed, entry point: 0x1000000
executing...

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
…………
Enable secret warning
----------------------------------
In order to access the device manager, an enable secret is required
If you enter the initial configuration dialog, you will be prompted for the enable secret
If you choose not to enter the intial configuration dialog, or if you exit setup without setting the enable secret,
please set an enable secret using the following CLI in configuration mode-
enable secret 0 <cleartext password>
----------------------------------
Would you like to enter the initial configuration dialog? [yes/no]: no
5、将配置文件恢复。
Switch>en
Switch#rename flash:config.old flash:config.text
Destination filename [config.text]?
Switch#copy flash:config.text system:running-config
Destination filename [running-config]?
% Generating 1024 bit RSA keys, keys will be non-exportable...
*Mar  1 00:03:19.296: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to down[OK]

*Mar  1 00:03:22.962: %SSH-5-ENABLED: SSH 1.99 has been enabled
Switch#configure
Configuring from terminal, memory, or network [terminal]?
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#username admin password admin
Switch(config)#enable password admin

6、Switch#write memory
7、Switch#reload