Re: SH RUN reveals encrypted password

2001-02-01 Thread J Roysdon
ftp://artoo.net/pub/bin/windows/32bit/password/ GetPass!.exe is my favorite and very useful for clueless customers who misplace passwords/lose staff but don't want to have to crack a large number of routers. -- Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+ List email: [EMAIL PROTECT

RE: SH RUN reveals encrypted password

2001-01-29 Thread RCL
working/Password_Decryptor/index.htm > > > > > > adam lee <[EMAIL PROTECTED]> on 01/29/2001 > 05:05:38 AM > > Please respond to adam lee <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > cc: (bcc: Larry Ogun-Banjo/EN/Kpn-Orange) > > Subject:

RE: SH RUN reveals encrypted password

2001-01-29 Thread Larry Ogun-Banjo
MAIL PROTECTED]> To: [EMAIL PROTECTED] cc:(bcc: Larry Ogun-Banjo/EN/Kpn-Orange) Subject: RE: SH RUN reveals encrypted password How readily available are these decryptors? I heard of them but I do not know anyone with one. > > ""Hans Stout"" <[EMAIL PRO

Re: SH RUN reveals encrypted password

2001-01-29 Thread Kevin Welch
The problem is that if you do not have access to show the running config, it is ommited completely from the show tech-support. At least when I tried it. -- Kevin "Avran" <[EMAIL PROTECTED]> wrote in message 9535uc$tst$[EMAIL PROTECTED]">news:9535uc$tst$[EMAIL PROTECTED]... > I suggest that you

Re: SH RUN reveals encrypted password

2001-01-28 Thread Avran
I suggest that you setup password level between 2 and 14 and define them. For example just let the user use only "show tech-support " which will hide all config that is deemed secure. Just try the command and see. In fact CISCO engineers suggest that you use 8 or more characters and include unde

RE: SH RUN reveals encrypted password

2001-01-28 Thread adam lee
How readily available are these decryptors? I heard of them but I do not know anyone with one. > > ""Hans Stout"" <[EMAIL PROTECTED]> wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hello colleagues, > > > > > > do you know if there is a way to make the line 'enable secre

Re: SH RUN reveals encrypted password

2001-01-28 Thread Matthew . Sypherd
> Sent by: [EMAIL PROTECTED] To: "Tony van Ree" <[EMAIL PROTECTED]>, "Gareth Hinton" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> cc: Subject: Re: SH RUN reveals encrypted password Then stand corrected.. you must be in the privileged mode to execute

Re: SH RUN reveals encrypted password

2001-01-28 Thread Kevin Wigle
;Tony van Ree" <[EMAIL PROTECTED]> To: "Gareth Hinton" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, 28 January, 2001 16:11 Subject: Re: SH RUN reveals encrypted password > Hi, > > Correct me if I'm wrong but don't you need the enable

Re: SH RUN reveals encrypted password

2001-01-28 Thread Tony van Ree
Hi, Sorry, I'm wrong, I didn't read the question. (I guess that is someting I need to fix before exams) Enable Secret maybe better. Teunis Hobart, Tasmania Australia On Monday, January 29, 2001 at 08:11:13 AM, Tony van Ree wrote: > Hi, > > Correct me if I'm wrong but don't you need the ena

Re: SH RUN reveals encrypted password

2001-01-28 Thread Tony van Ree
Hi, Correct me if I'm wrong but don't you need the enable password to perform a "show run". If you do then why decrypt it. router#service password encryption encrypts it to a level 7. Teunis, Hobart, Tasmania Australia On Sunday, January 28, 2001 at 09:37:36 AM, Gareth Hinton wrote: > Has

Re: SH RUN reveals encrypted password

2001-01-28 Thread Javier Contreras
Hi The "enable secret", and that you see it on the config, is only a MD-5 hash of the original password. In other words, the router does not stores the password in the config, it only stores a "signature" of it. So, there is no way of "decrypt" it, as it is NOT encrypted (a hash function is not e

Re: SH RUN reveals encrypted password

2001-01-28 Thread Gareth Hinton
Has anybody actually managed to decrypt an enable password yet? I know the level 7 passwords are easily decrypted, but I've not seen the level 5 passwords decrypted yet. I realise, that depending on your organisation, you can never play too safe. I should think if anyone has cracked it, someone

SH RUN reveals encrypted password

2001-01-28 Thread Hans Stout
Hello colleagues, do you know if there is a way to make the line 'enable secret 5 $1$vwIl$YEZxTVGPapUUVCD.c54Ya' invisible when doing a 'sh run' in user mode ? The problem is that I want to allow RO access and also allow to execute the 'sh run' command, but that with a password decryptor, one