full-disclosure - Re: Enable secret 5 : Cisco Password

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 23 May 2007 16:47:22 -0400
From: Michael Holstein <michael.holstein@...ohio.edu>
To: Knud Erik Højgaard <kokanin@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Enable secret 5 : Cisco Password

> Dork, show me a full set of a-zA-Z0-9{8} rainbow tables with salted
> md5 and I will show you a picture of me in a bathing suit.

My *point* was that a rainbow attack against is a lot faster than a 
brute-force with JTR or similar. Might as well try the easier options first.

Of course, if the router is "in hand" it's even easier still to reboot 
it into ROMmon and reset the config register, but that's not what the OP 
asked.

~Mike.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/