How wadesweaponshed/check_point_password_reset works
Check Point Password Changer is a local operator workbench for changing Gaia user or Expert passwords and recovering Gaia logins across selected managed targets. The principal flow is operator login and target selection, SIC/platform checks, explicit reset confirmation, manager-run scripts with task polling, and per-target outcome review. The server routes browser requests into domain workflows; session management handles manager API access, while the catalog subsystem supplies API command metadata. The README documents the manager-mediated execution model. Some UI wiring and workflow internals were not sampled, so uncertain links are omitted or marked unverified.
Main entry points: server.js HTTP and static server · app.js Workbench interaction · password-reset.js Target reset workflow · session-manager.js Session manager
Components 21
Operator workbench
- Browser UI
public/index.html - Workbench interaction
public/app.js - Target selection
public/target-selection.js - Workbench panels
public/workbench.js - Result review
public/result-view.js - Hash tools
public/password-app.js - Hash format checks
public/password-hash-format.js
Application server
- HTTP and static server
src/server.js
Password workflows
- Target reset workflow
src/workflows/password-reset.js - Platform detection
src/workflows/platform.js - Lock recovery
src/workflows/gaia-lock.js - Password hash generation
src/workflows/password-hash.js - Inventory example
src/workflows/example.js
Management API
- Session manager
src/session-manager.js - Check Point client
src/check-point-client.js - Task polling
src/task-polling.js
API catalog
- Catalog manager
src/catalog-manager.js - Bundled API catalogs
public/data/check-point-api-v2.1.json
Other components
- Administrator
- SMS / MDS / Smart-1
- OpenSSL
Connections 23
- Administrator → Browser UI: uses
README.md - Browser UI → Workbench interaction: hosts
- Workbench interaction → HTTP and static server: requests API
public/app.js - HTTP and static server → Session manager: routes login and commands
src/server.js - HTTP and static server → Target reset workflow: routes reset actions
src/server.js - HTTP and static server → Password hash generation: routes hash generation
src/server.js - HTTP and static server → Inventory example: routes inventory example
src/server.js - HTTP and static server → Catalog manager: serves catalog actions
src/server.js - HTTP and static server → Browser UI: serves UI
src/server.js - Session manager → Check Point client: creates API client
src/session-manager.js - Session manager → Task polling: polls tasks
src/session-manager.js - Session manager → SMS / MDS / Smart-1: sends management API requests
README.md - Target reset workflow → SMS / MDS / Smart-1: runs target scripts
README.md - SMS / MDS / Smart-1 → Task polling: returns task status
README.md - Target reset workflow → Platform detection: checks platform
- Target reset workflow → Lock recovery: may recover login lock
- Result review → Administrator: presents outcomes
public/result-view.js - Workbench interaction → Result review: renders job results
- Workbench interaction → Target selection: supports target choice
- Hash tools → HTTP and static server: requests hash generation
- Password hash generation → OpenSSL: generates SHA-512 hashes
README.md - Catalog manager → Bundled API catalogs: loads bundled catalogs
README.md - Workbench interaction → Catalog manager: requests catalog metadata
public/app.js