[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 12 Apr 2013 09:38:38 -0800
From: Leif Sawyer <lsawyer@....com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Cisco ACS username: hash or crypt or.... and de-encoding?
I looked through the archives but didn't see anything related...
For Cisco ACS 5, in the CLI administration, a "repository" is defined for the system
to pull or push backups and patches.
Part of the repo definition is an optional username and password (for ftp, say),
and is defined thusly:
ACS(config)# repository test-ftp
ACS(config-repository)# user TestUser password plain abc123
which looks like this afterward:
ACS(config)# do sho run | include TestUser
user Testuser password hash 0c5eadecc96d64ebe2b9e1d3b636d6053e3898bb
I noted that Cisco calls it a 'hash' -- but since it needs to be cleartext for the ftp process to use it,
wouldn't this be a misnomer?
In any case, here's a handful of different passwords and hashes, in case somebody can
do something with it:
--------
Cisco ACS 5.3 repository passwords:
! user password password plain password
user password password hash e047fabda9d3659e8d95a73223324f85149e394f
!
! user test password plain test
user test password hash 97dc37c94236ec1b4c56871c2e482cbd6f56bd33
!
! user abc123 password plain abc123
user abc123 password hash 0c5eadecc96d64ebe2b9e1d3b636d6053e3898bb
!
! user longestpwalla password plain aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
user longestpwalla password hash 9d0bd5a5c623b5d05e8b9f882ddf3873eab1460e
!
! user shortpwalla password plain a
user shortpwalla password hash 9d6afb513cd6b08be15f600545bba0496fd4efd5
!
! user eightzeros password plain 00000000
user eightzeros password hash 1614fab9117559699c1a6589a9b462871e9ccb30
!
! user sevenzeroandone password plain 00000001
user sevenzeroandone password hash 26ffcd3488ee3799629db606d5927bf73cf6a0bf
Powered by blists - more mailing lists
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ