Shulou(Shulou.com)06/02 Report--

A SVN server of the company two years ago, due to disrepair, the basic information has been lost in time, except to know that it used to be a svn server of a department, nothing else. Until one day recently, a department suddenly wanted to take all the data out of this machine, and then I took over this glorious and arduous task. To be honest, I really knew it was a svn server.

After getting the machine, turn on the electricity and connect the monitor. The first question is that this is a windows2008 machine. I don't have a password.

Now do PE disk, into the system to crack the password, here do not repeat, we can do their own Baidu.

After entering the system, I found that this svn uses the version of Collab Net Subversion. To tell you the truth, I haven't used it.

Then all kinds of Baidu, all kinds of information, probably figured out the installation process of this csvn, and then found that the real thing is really simple, that complex can make people vomit blood.

Enter the system, find the installation directory of csvn, on disk C, and then find that there is a D disk in svn's data warehouse, which is about 14G in size. Start csvn directly from the background locally, the second problem comes ~ ~ there is no password for Super Admin. The default account password group admin,admin has been modified. Orz

So the first task is to crack the password of admin ~ ~ after several days of data search and numerous tests, it is found that this version of svn uses a database called psqldb, and the file location is:

Here is one more mouth, it is best to use a little more professional editing tools to open the file, such as notepadd,editplus, so as to avoid unnecessary coding problems ~ ~ after all, csvn is combined with apache, windows editing tools are easy to generate Bom headers.

After opening it, you can see a lot of sql statements, which can be searched directly by ctrl+f:

Here is the file of my virtual machine. I would like to make an illustrative demonstration. What is intercepted is the relevant information of the self-contained admin account. You can see that there are many values in the value. One value is 1.1. according to my guess, this is the second sql record of the first account. If you are careful, you must see that there is a 1.0 logo insert statement on the picture. This 1 refers to admin. Then the second value is a long string of code, which is the encrypted password of the stored admin. Judging from this string of code, the encryption method here is not advanced, so you know the key point. I chose the roughest method. I directly opened another win2008 virtual machine, installed the same version of csvn, then found the database file in the newly opened csvn, found the encrypted password of admin, copied it directly, copied and pasted it, that's right. Even the default admin, the password is also admin, as to whether it is successful, wait a moment, let's go on to talk about the meaning of this long list of values. The third value after the password represents the enabled status of the account, and TRUE is enabled. The fourth value is the account name, the fifth value is the administrator's mailbox of the account, the sixth value is the administrator's description, and the seventh value is the administrator's description.

Then restart the two services of csvn, wait a moment, reconnect to the backend, type admin,admin, and then find that the login is successful ~ ~ this means that I have got the permission of Super Admin, then the next step is the user right of the specified version repository. If you do not do fine control, you only need a total permission, like this time, just to copy data, so I have set the read and write permissions of admin as a super administrator for all repositories. For more information, please see SVN permission settings.

Then copy the data ~ ~ download Little Tortoise's svn client (TortoiseSVN) installation configuration. Here is another pit, that is, before connecting to the data warehouse, you need to configure the csvn account password in settings:

Then open repo browser, enter the url of svn, and then enter the account password to see the contents of the data warehouse.

Here I would like to complain that because this csvn is based on apache and subversion, the support for Chinese paths is quite poor. When the administrator logs in the background, check the data warehouse, you will find that as long as you bring the Chinese directory, you will open it in the wrong location of 404, which gives me a great confusion. At one point, I thought I had changed some configuration file wrong. Finally, it was found that there was a problem in the backstage of the management end. After connecting with a small turtle, the Chinese path would not report 404pm / manual complaint / /

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.