UNIX. OpenVMS and Windows System Administration. Digital Forensics. High Performance Computing. Clustering and Distributed Systems.
be one reason you shouldn't paste your Cisco configs or password hashes on the Internet:Cisco's PIX password encryption is a base64 encoded MD5 hashsum using only one MD5 update (no salting or anything). This also permits for cryptanalysis attacks using rainbow tables to speed up the process. Simple hashes like:
enable password RLPMUQ26KL4blgFN encrypted
Get cracked instantly. -> 1234Also note that in the algorithm that may allow for more complex password cracking attacks. Also if you're using a "type 7" password that's pretty much useless since it can get cracked instantly. People can just use simple tools such as or Solarwinds Router Password Decryption to reverse the crypto on type 7 passwords.
someuser privilege 0 password 7 06351A3149085123301517391C501918
IOS type 5 passwords (MD5 using 1000 rounds) is more complex and harder to crack but yous still shouldn't paste your hashes for everyone to see... Remember even with type 5 passwords you're still vulnerable to dictionary attacks hybrid attacks rainbow table attacks (PIX only) or plain old password guessing. If you're going to paste your config files anywhere use the "show tech-support" command available in newer IOS versions. It gives more info and strips confidential information password hashes and such. You can even use decrypt pl - a to instantly decrypt write 7 passwords:#!/usr/bin/perl -w# $Id: ios7decrypt pl,v 1.1 1998/01/11 21:31:12 mesrik Exp $## Credits for orginal code and description hobbit@avian org,# SPHiXe. mudge et al and for John Bashinski
# for Cisco IOS password encryption facts.## Use for any malice or illegal purposes strictly prohibited!#@xlat = ( 0x64. 0x73. 0x66. 0x64. 0x3b. 0x6b. 0x66. 0x6f. 0x41. 0x2c. 0x2e. 0x69. 0x79. 0x65. 0x77. 0x72. 0x6b. 0x6c. 0x64. 0x4a. 0x4b. 0x44. 0x48. 0x53. 0x55. 0x42 );}while (
) { if (/(password|md5)\s+7\s+([\da-f]+)/io) { if (!(length($2) & 1)) { $ep = $2; $dp = ""; ($s. $e) = ($2 =~ /^(..)(.+)/o); for ($i = 0; $i
Forex Groups - Tips on Trading
Related article:
http://unixsadm.blogspot.com/2007/11/cracking-cisco-type-7-and-type-5-pix.html
comments | Add comment | Report as Spam
|