Penetration Testing: Re: [PEN-TEST] Router Password Recovery

[Bill Pennington <billp () boarder org>]

Well you might want to try SNMP to upload a config file to the router.
Assuming the router has RW SNMP turned on and you know the community
string, it is pretty straight forward. Solarwinds
(http://www.solarwinds.net) has a tool called Cisco config uploader that
will do the trick for you.

Another anble to take is to get the config file, most likely sitting on
the net admins disk somewhere, and grab a Cisco type 7 password
decryptor and go to town.

Hope that helps!

"Smith, Lonnie" wrote:

>   Does anyone have any way to do Password recovery on a Cisco router
> without having to reboot a Cisco 3600 series? I have local access and
> telnet access. Thanks!
--


Bill Pennington - CISSP