News:

Buffalo provides Data Recovery services. Read about it here.

Main Menu

{Guide}How to get SSH access and change transmission client password on LS520D

Started by Gogoli, August 20, 2020, 09:10:51 AM

Previous topic - Next topic

Gogoli

Hello

After struggling to find a way to change transmission password because the default one is empty I found the way to change that password...
My box is a Buffalo LS 520D with firmware 4.50

First, we have to enable ssh to get root access witch is very simple using acp commander witch all of you are familiar with
java -jar acp_commander.jar -t yournasiphere -ip yournasiphere -c "/etc/init.d/ssh.bak start"

The root password is empty but in case it isn't just use this command to change the root password to something you want
java -jar acp_commander.jar -t NAS_IP -ip NAS_IP -pw Youradminpassword -c "(echo newrootpass;echo newrootpass)|passwd"

You have to change settings.json permission
java -jar acp_commander.jar -t yournasiphere -ip yournasiphere -c "chmod 777 /etc/transmission-daemon/settings.json"

Third, you have to use WinSCP windows program and login through sftp with your ssh credentials and navigate to:
/etc/transmission-daemon/settings.json

After, write the rpc-password in the /etc/transmission-daemon/settings.json file, in double-quotes

At the end connect through putty with ssh details and run this command
/etc/init.d/transmission-daemon reload

Voila your trasmission password was changed successfully



1000001101000


Gogoli

Yes 100%...I already tried to reboot it and even turned off my NAS and the password didn't reset....After reboot or reloading the demon the password is same, just the password inside the settings.json is being hashed automatically by the system.


The trick for this was to not run those commands while demon is stopped!


1000001101000

I noticed they did an overlay for /etc but didn't realize it was to make it RW. That makes sense, otherwise things like passwords also wouldn't be persistent.

That opens up some interesting (and dangerous) possibilities.

Gogoli

Dangerous for me is equal to freedom

To earn full freedom you have to risk

1000001101000

were you able to log in directly by connecting to root@<nas_ip> or did you have to connect as admin and then switch user?

Gogoli

As root@NAS
They only stopped the ssh and renamed it to ssh.bak
Starting it give you root access by loging in as root

The only problem is that there isnt much you cant do with it as everything is disabled,even no text editor installed.At least I edited the trasmission file to set the password through sftp and using root login

Donnydev42069

Hello,

i'm having a slight issue with changing my password for transmission, I have been able to follow the steps fine, alter the settings.json add a new password in double quotes, reload the daemon, confirm that the password is still in the settings.json file but when I goto the webpage it still allows me to login without a password, any ideas?

cheers


Browser ID: smf (is_webkit)
Templates: 4: index (default), Display (default), GenericControls (default), GenericControls (default).
Sub templates: 6: init, html_above, body_above, main, body_below, html_below.
Language files: 5: index+Modifications.english (default), Post.english (default), Editor.english (default), Drafts.english (default), StopForumSpam.english (default).
Style sheets: 4: index.css, attachments.css, jquery.sceditor.css, responsive.css.
Hooks called: 261 (show)
Files included: 35 - 1354KB. (show)
Memory used: 1043KB.
Tokens: post-login.
Queries used: 15.

[Show Queries]