how to crack set up password dm 500

[vehlajatt]

how to crack or retrive set up password for pli on dm 500 ..i dnt want to reflash ..cz i like this image ..which is very small & some very good scripts in it i managed to make dream up back up ..& then i can view some inside info with view var program ..but when i am looking for set up password ..it shows me b6d8 ..so when i convert this hex format to deci ..it shows me 5 digits of set up pin ..which should be 4 numbers ..so expert me this matter plz
this is what i am looking in back up image with view var

i:/elitedvb/pins/enablesetuplock=00000001
i:/elitedvb/pins/maxpinerrors=0000000a
i:/elitedvb/pins/parentallock=00001c6a
i:/elitedvb/pins/pinerrorblocktime=00000001
i:/elitedvb/pins/setuplock=000ab6d8

[R_J]

can you ftp to the dreambox and edit the config file with dcc it is located in var/tuxbox/config/enigma and change the i:/elitedvb/pins/setuplock=00000000

[vehlajatt]

Sorry i cnt telenet .. Cz he changed telenet password to .. So need expert help in this matter

[stugz]

1. Download TuxBox Commander plugin.
2. Navigate to /var/etc/passwd
3. Edit the root password and set to blank.
4. Save file.

[vehlajatt]

1. Download TuxBox Commander plugin.
2. Navigate to /var/etc/passwd
3. Edit the root password and set to blank.
4. Save file.

thanks your are trying to help me ..but problem is set up is also locked .. thats why i posted what i have seen in view var

[stugz]

My apologies. I should have read more carefully. You could try brute forcing the telnet login using something like brutus.