actually i'd reocommend cracking the current password and logging on
with it. If you can hook it up on serial and have access to sh run to
see the crypted password you can run an old tool like ciscocrack.c (
google for it ) and you should have the attacker's password
On Fri, 2003-12-05 at 14:45, isa vaul wrote:
> Hello full-disclosure,
>
> I've got a little problem with a cisco router.
> It has obviously been compromised. How do i know, well the password
> has changed. So I want to retrieve the ACL from the RAM (not NVRAM)
> to see what else maybe got compromised.
> Does anyone know how this could be done?
>
> thanks for any suggestions in advance...
--
Jay
Public GnuPG key AAB551A4 available at
http://www.ines.ro/public_keys/jay.gpg
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Mon Dec 08 08:22:18 2003