// HackTricks · Network Services

2301, 2381 - Pentesting Compaq/HP Insight Manager

2301, 2381 - Pentesting Compaq/HP Insight Manager

HP System Management Homepage (SMH), commonly deployed alongside HP Systems Insight Manager, uses TCP port 2301 for HTTP/autostart and TCP port 2381 for HTTPS. Depending on the startup mode, a request to port 2301 may start the web service on port 2381 and redirect the browser.[1]

Authentication

Do not assume a universal product-level default password. HPE documentation for Windows deployments directs users to authenticate with an operating-system account; administrators on the host receive corresponding SMH privileges. Check for anonymous access and weak or reused host credentials only within the authorized scope.[2]

Config files

File names and locations vary by product version and operating system. When local access is available, useful files to locate include:[3]

path.properties
mx.log
CLIClientConfig.cfg
database.props
pg_hba.conf
jboss-service.xml
.namazurc

References

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.