Posts

Showing posts from November, 2026

Websense / Forcepoint accessing tech-support and root accounts with frida

Forcepoint / Websense Appliance — Recovering tech-support & root passwords We got rid of Websense / Forcepoint a while ago so I haven't had to use this in forever. But I'll leave this here in case anyone else has the misfortune of having to beg support for ssh / root access to fix their appliance. Download the appliance recovery image iso from your forcepoint support hub. Mine was named VX-Appliance-RecoveryImage-856.iso . Extract the files from the ISO, or extract your VMDK or other VM disk image. You're looking for a binary named wsra . In the ISO it's in Packages/appliance-api-x.x.x.x86_64.rpm ; there is also a debuginfo rpm if you want to debug the wsra binary. After extracting the wsra executable from the rpm, you can use the frida script below to convert the tech-support and show_root tokens into the actual account passwords. So after logging into your appliance you can do set account tech-support --status enabled , which will give yo...