Well i try to make my own exploit so it can decrypts the password and find the user name.How can i do this on a cisco router?I been looking at sourcescode that other people writen. :confused:
Printable View
Well i try to make my own exploit so it can decrypts the password and find the user name.How can i do this on a cisco router?I been looking at sourcescode that other people writen. :confused:
What AntiOnline IS:
AO is a worldwide community of security, network and computer professionals, students and keen amateurs who come here to learn the principles and details of computer/network security.
AO is a place where the community share their knowledge to help the others learn and where people assist each other with identifying and mitigating security issues as they pertain to the many real life situations faced by us all.
What AntiOnline is NOT:
AO is not a place where the community's knowledge is used or passed on to others in order to carry out illegal or immoral acts.
AO is not a place where you should be asking how to exploit/damage/attack any system that you do not own nor have the explicit permission of the legal owner.
What can you expect from AntiOnline:
You can expect to be treated in the same way you treat the AO community.
If you understand what AO is and is not, you can expect to be helped and to help others learn the art of computer/network security.
In which part of the above description does your question fall?
If you request information in a way that implies your intent is illegal or immoral you will receive a rapid response from the community that may ban you from continued participation.
Well i try to make my own decrypts tools so i can test on my hardware.Sorry i thought i was make it clear.
Actually, you never used the words my or mine except in reference to "My exploits"...
So are you tryingto do some kind of penetration testing? Or are you trying to create your own exploits (that you test on your own hardware) to use against others?
Just one final question if you don't mind :D... where did you get the idea you could learn how to do exploits here? Just curious...
Why reinvent the wheel?
http://www.boson.com/promo/utilities...ss_utility.htm
I know what your think that i a cracker and that not true.I am here to learn.
I didn't think that you were.Quote:
Originally posted here by InvisibleGhost
I know what your think that i a cracker and that not true.I am here to learn.
If you have access to the config... then I'd hope that you are an admin.
In order to get access to the config... you must have the enable password anyway.
So, this tool will kind of defeat the purpose... as, you will already have the password.
excuse me phish. sorry to but in here. but aren't cisco devices usually managed by telnet...which is sent out in plain text. it might encrypt in after it arrives but getting there its pretty visable isn't it? i know, use ssh, but people use telnet or hyperterminal
Yes the one i know use telnet.Sometime i think the user name is login in all the time but not the password.
Very true. Hopefully they're using ssh.Quote:
Originally posted here by Tedob1
excuse me phish. sorry to but in here. but aren't cisco devices usually managed by telnet...which is sent out in plain text. it might encrypt in after it arrives but getting there its pretty visable isn't it? i know, use ssh, but people use telnet or hyperterminal
Thats one of the first things that I do/did when configuring mine... :rolleyes:
If they use telnet and you are on te same lan.. you can easily grab the password..
I won't tell you how.. but you can easily find out by searching the forums..
I know not all router use ssh.If i ren right.
if private and/or public are still configured as snmp-server community strings (or you know what the non-default configured string might be), then one can grab the configuration via snmp. I believe you only need to have 'read' access to pull the config, but I may be mistaken on that point.
this is where the kind of tool that Phish pointed out is useful.
Cheers,
<0
I think i try to wrtie my own script then.:)
Wait, password's for vty sessions are sent as plaintext? I had no idea. So is it a mistake to rely on enable secret or should ssh be configured to secure the telnet login?
cc1x
There's more unix-nature in one line of shell script than 10,000 lines of C