topic Re: Get bash to Cluster member from Management in Firewall and Security Management

Get bash to Cluster member from Management

mnocciolino — Wed, 08 Nov 2023 16:55:31 GMT

Hi,

This is my seccond post. Enjoy!!

This procedure is for accessing a firewall from the Management, using rshell with

cprid_util

Tested in R81, R81.10.

Not test in R80.XX, but i think will be work

Prerequisites:

- Access to Management

1) Access via SSH to Management.

Execute the script rshell.sh attached

In the 1st field put the Management IP

In the 2nd field put the Gateway IP

2) After entering the 2 IPs, you will get access to the Gateway without password as admin user.

This is a not bash console, to jump bash you need put the detail commands.

script /dev/null -c bash
PRESS -> "CTRL+Z"
stty raw -echo; fg
reset xterm

3) After entering the commands, you will have access to the Gateway.

4) After you finish using, and try to exit, you will get the following (broken terminal):

to mitigate this, enter the command: "reset xterm" or close the terminal and open a new one.

-----------

Any suggestions or comments are welcome

mnocciolino

Re: Get bash to Cluster member from Management

PhoneBoy — Wed, 08 Nov 2023 22:17:29 GMT

cprid has been there for quite some time (going back to at least R5x days).
It also works on SMB appliances, though be aware of this: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Output-of-cprid-truncated-after-receiving-60001-bytes/m-p/168096#M8066

However, I'm pretty sure it's not meant for interactive use, only executing specific commands.
Therefore, you might find some issues that result from using it in this manner.

Re: Get bash to Cluster member from Management

mnocciolino — Fri, 10 Nov 2023 12:56:51 GMT

Hi PhoneBoy,

I only use cprid to execute the "rshell" command, I do not use cprid to transmit data.

I used this to reset the admin password, because they didn't remember the password.
I also used it once because there was no way to reach the management ip, and I logged in to see what the problem might be.

thank you for your reply.

Re: Get bash to Cluster member from Management

PhoneBoy — Fri, 10 Nov 2023 15:27:39 GMT

It's not the transmission of data that's an issue, it's the interactive nature of using a shell as you're doing.
Like I said, not sure how that will work over cprid in every case, but it is clever.