Dr Toker, I dont think anyone will tell you how to subvert cisco routers remotely, (I wont because I dont know how! ) but if you can gain physical access then the router is yours. All you need to do is follow the password recovery procedure to a certain point then copy the encrypted password into a cracker and voila! the rest is plain sailing.

Krang