Hacking the Rigol MSO5000 series oscilloscopes

[DocSnyder]

Hello,

i successfully unlocked the MSO5000. Many thanks for your efforts.

But I have a little problem. I am not able to use the Web Control feature. I can see the Webinterface but as soon as i want to use Web control it asks for the login. And guess what: the defaults admin/rigol do not work.
Can you verify that?
I don not know whether this relates to the script but it would be nice to have that feature.
I already tried the older FW and reset to defaults.

Anyone knows whats going on here?

[BTO]

Hello,

i successfully unlocked the MSO5000. Many thanks for your efforts.

But I have a little problem. I am not able to use the Web Control feature. I can see the Webinterface but as soon as i want to use Web control it asks for the login. And guess what: the defaults admin/rigol do not work.
Can you verify that?
I don not know whether this relates to the script but it would be nice to have that feature.
I already tried the older FW and reset to defaults.

Anyone knows whats going on here?

i successfully unlocked the MSO5000. Many thanks for your efforts.

You're Welcome Enjoy it.

As for Web Control,  Web control has it own little bugs and things and is a bit slower
Don't use Web control

USE VNC VIEWER

So...

- As of Version 1.3.2.2 Rigol has integrated remote support via VNC Viewer  , since you're on 1.3.3.0   you've already got it

- GO HERE
https://www.realvnc.com/en/connect/download/viewer/
Download  REAL VNC VIEWER
Install it

- When it opens there is going to be a white field up the top, ADDRESS BAR
  Enter your scopes I.P. Address in that White Field, Press Enter
  Follow the prompts

- For this to work your scope
1. Has to be connected via Ethernet cable to your Local Area network
2. Your scope must have detected an I.P. Address
3. it's preferable but not necessary that your scope be on DHCP
4. and the I.P. Address range of the scope must be the same range as that of your router

Meaning.......  if you go to cmd.exe and you type in
ipconfig

and your gateway ip  is  10.1.1.1
then your scope ip cannot be 192.168.1.X
it would have to be       10.1.1.X

where X is the Number allocated to your scopes IP Address

if you have issues, Let me know, But VNC is much faster than web control
 

[DocSnyder]

Many Thanks for that.

I already tried the VNC feature and it runs well.

But it wouldn't be me if i don't try to find answers to the misbehaviour of the Webinterface Login. Could the script mess up the default Credentials admin / rigol?

Or is that behaviour a bug of the two latest FW versions or came with the browser updates of the last months or years. I can't remember when i tried the Webinterface but i am pretty sure, that it worked as expected.

First step would be that someone who patched the  script tries the Webinterface Webcontrol feature and report whether the login workes or not. And then someone who didn't use the script. All on the latest FW.

This would help me a lot.

[BTO]

Many Thanks for that.

I already tried the VNC feature and it runs well.

But it wouldn't be me if i don't try to find answers to the misbehaviour of the Webinterface Login. Could the script mess up the default Credentials admin / rigol?

Or is that behaviour a bug of the two latest FW versions or came with the browser updates of the last months or years. I can't remember when i tried the Webinterface but i am pretty sure, that it worked as expected.

First step would be that someone who patched the  script tries the Webinterface Webcontrol feature and report whether the login workes or not. And then someone who didn't use the script. All on the latest FW.

This would help me a lot.

Many Thanks for that.

You're Welcome

I already tried the VNC feature and it runs well.

Glad to hear it

But it wouldn't be me if i don't try to find answers to the misbehaviour of the Webinterface Login. Could the script mess up the default Credentials admin / rigol?

No.. that's fine, i'm not saying you can't troubleshoot it.
I just made the logical conclusion that you want to access your scope remotely and as i know that
VNC is faster in respoinding than webcontrol, i put forward the suggestion that you should use VNC and not worry
about Web Control

NOW.. IF YOU STILL WANT TO TROUBLESHOOT IT, THAT'S FINE We can do that

Could the script mess up the default Credentials admin / rigol?

1. NO as there is no Function in the script that controls that nor did we put in a feature for that.

2. IT'S IRRELEVANT Because... You just need to go into
Utility / IO / LAN
and even if the credentials were messed up, THE SCOPE IS GOING TO SHOW YOU THE USERNAME AND PASSWORD

In saying that,  I have NEVER been able to login to my scope via web control even from the factory.
Another reason why i chalked web control up to being crap

A lot of people have complained about web control

NOW FOR LOGINS

the default is

USERNAME           PASSWORD
admin                       rigol                            i also tried
admin                       rigol(default)                to account for stupidity, Ya know

                                                                  Now if the script has anything to do with it the credentials are
rigol                         rigol
root                         rigol
admin                      rigol
root                         Rigol201
admin                      Rigol201

then i did some more research and found that the others having this issue said, THIS WAS THE SOLUTION

In the web interface
go to SECURITY
change the password
FOR ALL , OLD AND NEW PASSWORD  type in    111111     "6  one's"
then hit apply
and you're supposed to be able to login with

BLANK USERNAME
Password    111111

it didn't work for me, but .. give it a go

what else i can fathom is... the computer is blocking it because it's not a secure connection

[BTO]

Many Thanks for that.

I already tried the VNC feature and it runs well.

But it wouldn't be me if i don't try to find answers to the misbehaviour of the Webinterface Login. Could the script mess up the default Credentials admin / rigol?

Or is that behaviour a bug of the two latest FW versions or came with the browser updates of the last months or years. I can't remember when i tried the Webinterface but i am pretty sure, that it worked as expected.

First step would be that someone who patched the  script tries the Webinterface Webcontrol feature and report whether the login workes or not. And then someone who didn't use the script. All on the latest FW.

This would help me a lot.

OK, I THINK I HAVE A SOLUTION FOR YOU
Instead of all this mucking around trying to brute force the password,

DO THIS...

Step 1: Use the PYTHON SCRIPT that i've attached,
it's the same one that you used to activate your scope

Step 2: Open Powershell or cmd.exe and type in the following command       (we are going to SSH into the scope to do this)

Code: [Select]

python Rigol_MSO_LicensingUtility_2.10b.py -e 10.1.1.140Where  -e  is the switch to SSH
Where 10.1.1.140  is my I.P. Address and you should insert your I.P. Address in it's place
Press ENTER

You will see a message at the bottom

Activating SSH...****SSH ACTIVATED****
Now..Open PuTTY.

Step 3. Open PuTTY
if you don't have it download it from here
https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
likely iTs the  64bit X86 Installer

when you've done that, Open Putty

Under HOSTNAME/IP ADDRESS  enter your I.P. Address of your scope
Confirm Port number is 22
Connection type SSH  and TELNET

click OPEN at the bottom

Step 4. you will see
login as :

the logins are either
root         (Username)
Rigol201  (Password)

if that doesn't work
rigol
rigol

NOTE : when it asks for the password  THE CURSOR WILL NOT MOVE AND YOU WILL NOT SEE THE LETTERS,
DO NOT HIT BACKSPACE OF DELETE, Just enter the password and hit ENTER

if it works, you will see the diretory
<root@rigol>

Step 5.   Just enter this command

Code: [Select]

echo "admin:rigol\n" > /rigol/data/user.conf
Press ENTER
Close your browser
Re open it
and in your browser
Type in your scope's I.P. Address
Login with

Username :  admin
Password  :  rigol

WebControl should just open and you should see your scopes screen

LET ME KNOW HOW THAT GOES

NOTE : My scope didn't go into WebControl either (even from the factory)
this got me in and accessing WebControl

As you can see when it works for you, WebControl is much slower

[BTO]

Many Thanks for that.

I already tried the VNC feature and it runs well.

But it wouldn't be me if i don't try to find answers to the misbehaviour of the Webinterface Login. Could the script mess up the default Credentials admin / rigol?

Or is that behaviour a bug of the two latest FW versions or came with the browser updates of the last months or years. I can't remember when i tried the Webinterface but i am pretty sure, that it worked as expected.

First step would be that someone who patched the  script tries the Webinterface Webcontrol feature and report whether the login workes or not. And then someone who didn't use the script. All on the latest FW.

This would help me a lot.

Just to address a few things

Could the script mess up the default Credentials admin / rigol?

NO, i'd be very suprised if it did

Or is that behaviour a bug of the two latest FW versions

No, nothing to do with that

i would say it's something with WebControl as many others have experienced this even on past Models like DS2000A and DS1054z
Most get the shits with WebControl and resort to UltraSigma

and i'm willing to be that why VNC Viewer came into support at 1.3.2.2 is because web control was crap and it was probably not worth the developed time
so they just added support for VNC to circumvent the problem.

This is just ...........The Credentials got screwy,  God knows why,   i blame WebControl, But.. Who knows exactly.
At least we can reset it and we know it's not about the activation that we applied nor is is the firmware version

the only quarm i now have with web control is...
I CAN'T LOGOUT

Try it !
Close your browser, do what you like,   you can't seem to actually logout,
it will just log you in as soon as you punch in the I.P. Address and select Web Control

[DocSnyder]

GREAT!!!

Your last post did the job. First it didn't work. Then i looked into the user.conf file. The password there was including the LF. Then I tried rigol\n as the password and that did it.
So the LF does not need to be pushed into the user.conf.

Many, many thanks. You helped me findig the solution. I needed to make a little last step on my own i wouldn't have found that without your hints.
Dunno whether this is problem of the actual FWs. I will try that tomorrow and reflash the FW.for today.
 

[BTO]

GREAT!!!

Your last post did the job. First it didn't work. Then i looked into the user.conf file. The password there was including the LF. Then I tried rigol\n as the password and that did it.
So the LF does not need to be pushed into the user.conf.

Many, many thanks. You helped me findig the solution. I needed to make a little last step on my own i wouldn't have found that without your hints.
Dunno whether this is problem of the actual FWs. I will try that tomorrow and reflash the FW.for today.

No Problem, You're Welcome
and, No, i wouldn't say it's a problem with the F/W
if i were you i wouldn't bother reflashing it,
But, You can if you like

Mine seemed to have the wrong password from factory, so... Yeah

but.. All good now.
Let me know if you need anything further .
Be Cool