add the following line to config.ini:

[hijack]
kftpd_password=insert plaintext password here

anyone with a web browser can just look at the config.ini file to see the password, so you have to add this line:

khttpd_files=0

You have to have developer installed to get to the bash prompt, but after the player has loaded, just press q (in hyperterm) to goto bash.