🔏Photon Lockdown

https://app.hackthebox.com/challenges/Photon%2520Lockdown

Mount Squashfs

sudo unsquashfs rootfs

And simply search recursively for the string PASSWORD in squashfs-root folder

 grep -r "PASSWORD" .
 ...
 ./bin/Upgrade:  echo 'hdv_auth  [FILENAME] [SERVERIP] [USERNAME] [PASSWORD], file must be encrypted format'
./etc/config_default.xml:<Value Name="RS_PASSWORD" Value=""/>
./etc/config_default.xml:<Value Name="ACCOUNT_RS_PASSWORD" Value=""/>
./etc/config_default.xml:<Value Name="WLAN1_RS_PASSWORD" Value=""/>
./etc/config_default.xml:<Value Name="WLAN1_ACCOUNT_RS_PASSWORD" Value=""/>
./etc/config_default.xml:<Value Name="SUSER_PASSWORD" Value="HTB{N0w_Y0u_C4n_L0g1n}"/>
./etc/config_default.xml:<Value Name="CWMP_ACS_PASSWORD" Value="password"/>
./etc/config_default.xml:<Value Name="CWMP_CONREQ_PASSWORD" Value=""/>
...