Resetting admin access

Hello members. I’d like to know how to reset the admin password, which is not known. There’s local access to the hardware.

You cannot reset only the admin password, even if you have physical access to the hardware.
Only option: factory reset. (or wait for another WinBox security flaw and learn to exploit it :slight_smile: )

… unless you have another user in group full (i.e. with admin rights). Any user with admin rights can set new passwords for all other users including other admins (not read the existing ones, just set new ones).

If there’s factory reset, will configuration of all network components also experience a reset?

What means “other network components”?

The complete active configuration of the Mikrotik will be reset to defaults, excluding files stored on flash. So if you have a configuration backup or export stored at least on the machine, you’ll be able to restore it after the factory reset; if you don’t, you’ll have to redo it from scratch.

Devices connected to the Mikrotik from outside will keep their configuration, but if it in some way depends on certificates of that Mikrotik, it will have to be modified too unless you have exported/can export those Mikrotik’s certificates including their private keys to files. To export a certificate with the private key, you must specify the passphrase parameter of export-certificate command. And you need quite high privileges to do that too, I’ve never tried this with other than “full” group user, so I don’t know which individual permissions are necessary for that.

All config is gone after a reset.

If ur device is under router os 6.4x you should be able to run the winbix exploit on it and get the admin password. Google winbix poc and it should be the first link. Eithet use the unix sub system or miniconda to run it as u need python 3.
This is only to be used on ur own hardware that you own and mannage.