On 11 February 2012 17:53, Larry Pesce <[email protected]> wrote: > Robin, I've had great success on tests with SNMP write strings during > some tests in the last year: > > 1. An external switch between external router and firewall with public > IP address form Netgear. App to manage was downloadable from form > Netgear for a 30 day free trial. Guess what the app allowed? Disable > port. Good bye internets.
For that you have to have the custom app, do you know if anyone does a generic app that covers multiple devices? That would be really useful. I'll make sure that I check support forums next time I find one and see whats there. > 2. Use to dump Cisco running config to my own TFTP server (with a good > portion of Cisco routers and switches). Once you have the config, all > sorts of things are possible - especially if they are still storing > passwords on the device in the clear or with type 7. With this easily > decoded passwords, you'd not be surprised how often they are re-used > across the org for all sorts of thing, including the rest of their Cisco > infrastructure. I use muts' script that I found here: > http://littlehacker.persiangig.com/cisco/copy-router-config.pl > (I think it also might be on BT5, but I'm not sure.) Do you know if you can put it back again if you have write access? That would be very useful! I'll definitely be using this script next time I'm on a test. Robin > - L > > On 2/10/12 6:32 AM, Robin Wood wrote: >> Does anyone have any good information on using SNMP write strings that >> we find on tests? I'd always been told that you need clients for the >> specific application/device to properly use an SNMP write string to >> modify anything but I'm now questioning that as it doesn't feel right. >> >> It is the kind of thing I would only do with permission to demonstrate >> what can be done but would be useful to be able to show if asked. >> >> Robin >> _______________________________________________ >> Pauldotcom mailing list >> [email protected] >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >> Main Web Site: http://pauldotcom.com > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
