Password Unknown 1

[Flyers01]

I have a several cisco 3550 switches I have no Idea what the enable password is how can I find out what it is without chaning anything

 

[Flyers01]

it;s is also enable secret 5 not 7

 

[DallasBPF]

umm... the only meathod i know is by doing a password recovery process, which will require you to take down the switches one at a time, the process takes about 10 - 15 min. depending on how well you know what you are doing.

------------------------------------
Dallas, Texas
Telecommunications Tech
CCVP, CCNA, Net+

CCNP in the works

 

[lerdalt]

If you know the snmp read/write string, you could snmp a config snippet with a new password.

 

[Flyers01]

I think I know the snmp string how do I do a snippet

 

[lerdalt]

create a text file that has just the lines you want to add/replace to the running configuration. I then use solarwinds to push those changes to the device, but there are other tools you can use as well.

Here is the link to Cisco's page that describes how to do it.

http://www.cisco.com/en/US/tech/tk648/tk362/technologies_configuration_example09186a0080094aa6.shtml

 

[Flyers01]

Solar Winds I will try to do this Monday
do you know a free program that will work

Thanks

 

[Flyers01]

not working on snmp

I am able to get in the switch but I how do I find what the passwords is
Note it is a secret password. I have other switches with same password that are in remote locations

 

[lerdalt]

hmm...if you can take the string, you might be able to find a cracker for it on the internet.

 

[burtsbees]

Not for a secret, lerdalt, which is an irreversible MD5 hash.

Burt

 

[lerdalt]

there are crackers out there even for MD5. Cain and Abel supposedly can do it. I've never tried, it but it is listed.

 

[Flyers01]

I am trying this now.

Looks like this may take a LONG time.

 

[burtsbees]

Cain and Abel can only do level 7 passwords, as far as I know. I played around with it a while back.
Let me know if you do find a cracker for MD5!.

Burt

 

[Flyers01]

it does MD5 By Brute Force which will take a very long time.

 

[burtsbees]

Yeah---brute force dictionary crackers can do anything, but with any numbers, caps, and symbols mixed in, then almost impossible in our lifetime. My passwords for my FTP server and all my routers will take 673 years to crack, according to Sam Inside, Brutus and l0phtcr4ck.

Burt

 

[lerdalt]

Yeah, sorry, I forgot how slow cracking MD5 can be. I'd say you are stuck with 2 options.

1. Do the password recovery on every device.
2. Figure out how to push a new password to the device.