Grandstream phone system: admin login

Would like to test the possibility of pulling login info for a grandstream if someone were to get our backup files.

The grandsteam allows backup and restore from a tar file. And when you restore, the logins are restored as well.

I opened the tar file, and see it in plain text SALTED__ at the start of the file.

Would this mean someone could pull out the login? Any suggestions as to if this is possible, has anyone done this? I won't post the details of one of the files, as that might be against the mod rules.

submitted by /u/NorthernDen
[link] [comments]

from hacking: security in practice https://ift.tt/MFIY2z8

Comments