Cisco routers running v4.1 software (which currently is most of them) will be
easily disabled. You simply connect to
the router on port 23 through your proxy server, and enter a HUGE password
string, something like;
10293847465qpwoeirutyalskdjf hgzmxncbv019dsk10293847465qpwoeirut yalskdjfhgzmxncbv
019dsk1029384746 5qpwoeirutyalskdjfhgzmxncbv019dsk10 293847465qpwoeirutyalskdjfhgz
mxnc bv019dsk10293847465qpwoeirutyalskdj fhgzmxncbv019dsk10293847465qpwoeiru tyalsk
djfhgzmxncbv019dsk102938474 65qpwoeirutyalskdjfhgzmxncbv019dsk1 0293847465qpwoeiru
tyalskdjfhgzmxn cbv019dsk
Now wait, the cisco system might reboot, in which case you can't hack it because
it is offline.. But it will
probably freeze up for a period of 2-10 minutes, which you must use to get in.
If neither happens, then it is not running the vulnerable software, in which
case you can try several DoS attacks,
like a huge ping. Go to dos and type "ping -l 56550 cisco.router.ip -t", this
will do the same trick for you.
While it is frozen, open up another connection to it from some other proxy, and
put the password as "admin", the
reason for this is because by default, this is the router's password, and while
it is temporarily disabled, it will
revert to it's default state.
Now that you have logged in, you must acquire the password file! The systems run
different software, but most will
have a prompt like "htl-textil" or something, now type "?" for a list of
commands, you will see a huge list of
commands, somewhere in there you will find a transfer command, use that to get
the password file of admin (which is
the current user) and send it to your own IP address on port 23. But before you
do this, set up HyperTerminal to
wait for a call from the cisco router. Now once you send the file, HyperTerminal
will ask you if you want to accept
the file that this machine is sending you, say yes and save it to disk. Logout.
You are now past the hardest part, give yourself a pat on the back and get ready
to break that password!
Answered by Nz
at
4:15 PM on November 12, 2007
