Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: RE: Cisco 2501 Router

RE: Cisco 2501 Router

From: Greg <greg_at_hoobie.net>
Date: Sun, 6 Jan 2002 12:47:17 -0000

This has come up a few times. If you have read/write SNMP access then
it's pretty simple.

You can set a new password, or update running config in any other way
using OID 1.3.6.1.4.1.9.2.1.53.x.x.x.x <file>

The x.x.x.x specifies a tftp server and file specifies a file to UPLOAD
to the router. This file could contain perhaps one line:
'enable secret password'
This then resets the Cisco enable password to 'password' within running
config so no reboot etc. is needed and yer existing config is untouched.

regards

Greg Jones

> -----Original Message-----
> From: Rob Iles [mailto:Robert.Iles_at_ntlworld.com]
> Sent: 05 January 2002 18:20
> To: pen-test_at_securityfocus.com
> Subject: Cisco 2501 Router
>
>
> Al, I appreciate this doesn't pertain to pen-testing exactly,
> but I hope
> the expertise of list members may be able to assist me. If
> you choose not
> to pass it, I'd quite understand!
>
> Thanks.
>
>
> List,
> I am in the unfortunate (some would say careless)
> position of not having
> the password for one of our critical Cisco 2501 Routers.
> Does anyone know
> of a way to obtain the password? Wiping the configuration
> completely is
> not an option. I have SNMP access to the device, and can also
> connect via
> a console cable if necessary.
>
> Any assistance *greatly* appreciated!
>
> Regards,
>
> RI.
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Jan 06 2002

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]