Crack Cisco Password

Tadi ketika mau masuk router yang sering dikunjungi, ga tau kenapa tiba-tiba lupa password. Zzinkk!! tau-tau mau nginget susah banget. Karena lagi ga terlalu sibuk, iseng2 liat backup konfigurasi routernya.
hostname ach_keren
00:!
01:enable secret 5 $1$SKOf$u9nY/jWlSGpdUdfJDf98
02:enable password 7 xxxxxxx
03:!
04:username ach password 7 xxxxxxxx
05:username admin privilege 15 password 7 xxxxxx

Argh.. daripada mikir, mendingan iseng2 coba cari cara crack-nya di internet…
Cari-cari di google.. loh.. ternyata sudah banyak toh artikelnya.. trus juga udah lama toh bisa di crack… hehe..
Nah.. sekarang coba-coba ah….
hmmm… karena banyak versinya, cobain yang pake perl n web aja ah… (yg make C males compile nya :-p )
coba yang perl dulu ah…
ambil source code nya dari sini

00:
01:#
02:# Credits for orginal code and description hobbit@avian.org,
03:# SPHiXe, .mudge et al. and for John Bashinski <jbash@CISCO.COM>
04:# for Cisco IOS password encryption facts.
05:#
06:# Use for any malice or illegal purposes strictly prohibited!
07:#
08:@xlat = ( 0x64, 0x73, 0x66, 0x64, 0x3b, 0x6b, 0x66, 0x6f, 0x41,
09:0x2c, 0x2e, 0x69, 0x79, 0x65, 0x77, 0x72, 0x6b, 0x6c,0x64, 0x4a, 0x4b, 0x44, 10:0x48, 0x53 , 0x55, 0x42 );
11:while (<>) {
12:if (/(password|md5)\s+7\s+([\da-f]+)/io) {
13:if (!(length($2) & 1)) {
14:$ep = $2; $dp = "";
15:($s, $e) = ($2 =~ /^(..)(.+)/o);
16:for ($i = 0; $i < length($e); $i+=2) {
17:$dp .= sprintf "%c",hex(substr($e,$i,2))^$xlat[$s++];
18:}
19:s/7\s+$ep/$dp/;
20:}
21:}
22:print;
23:}
24:# eof

Trus buat file baru yg isinya :
00:username ach password 7 xxxxxxxx
01:username admin privilege 15 password 7 xxxxxx

Trus jalanin deh file perlnya…
00:[chaidir@aCh ~]$ ./cisco.pl test
01:username ach password achaikerendeh
02:username admin privilege 15 password achaikerenbangetdeh

Hore… hore… ketemu lagi passwordnya…
duh.. jd serem ngasih priviledge 15, apa mendingan lgsg enable secret aja ya??
Nah, klo mau nyoba yang lebih mudah lagi.. mendingan langsung lewat web sini
Yosh!! karena dah nemu passwordnya… kembali ke laptop!!

Kerja lagi kitah….

Referensi :
http://insecure.org/sploits/cisco.passwords.html
http://www.cisco.com/warp/public/701/64.html
http://onno.vlsm.org/v01/OnnoWPurbo/contrib/network/network-security/cisco-pass-the-password.txt
http://www.ifm.net.nz/cookbooks/passwordcracker.html

Related Post: