Using EIGRP key chain on router to recover type 7 passwords

From: Greg Wendel (gwendel@gmail.com)
Date: Mon Feb 18 2008 - 04:35:18 ARST

Next message: Cristian Ionescu: "Re: BGP - Connection refused by remote host"
Previous message: Ashwin Iyer: "cisco lab setup using vmware"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Cool tip from Jeremy at http://www.ciscoblog.com/

I'm stealing this guy from a reader tip on the January edition of the Cisco
Tech Newsletter<http://www.cisco.com/public/news_training/itsnews/tech/readertips/200801.html>.
Apparently, the "keychain" configuration of a Cisco router supports a
decrypt command that allows you to recover (break) the Type 7 encrypted
passwords:

Router (config) #key chain LIGHT
Router (config-keychain) #key 718
Router (config-keychain-key) #key-string 7
11192616193C233850012E3D2B2725711D
Router (config-keychain-key) #do show key chain LIGHT Key-chain decrypt:

key 1 -- text "decrypted_password"

accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]

It probably takes more time to do something like this than just paste the
encrypted password into this Java
applet<http://www.kazmier.com/computer/cisco-apps.html>...but
you'd feel much cooler doing it this way :).

-- 
Gregory Wendel
Springfield VA, 22153

Next message: Cristian Ionescu: "Re: BGP - Connection refused by remote host"
Previous message: Ashwin Iyer: "cisco lab setup using vmware"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:49 ARST