4 ms·
On a Cisco router you login via SSH or Telnet, then you run a command to become 'enabled'. enable is a command like sudo on Linux-it elevates your permission le
by a2tech 10y ago
On a Cisco router you login via SSH or Telnet, then you run a command to become 'enabled'. enable is a command like sudo on Linux-it elevates your permission level so you can make changes (although not all changes require you to be enabled, most do).
If you used ExtraBacon to clear the login user/password you would get a basic shell on connection. This would open at least 2 options to you as an attacker-1) using a local exploit to become an enabled user and 2) you can now send traffic to ALL the networks that the firewall/router knows about-for example, a non-internet connected management network that might be filled with never upgraded KVM/OOB control equipment.
- Zombieball 10y agoThanks! #2 definitely seems like a big issue. I can imagine many "internal" services that are potentially insecure.
- Vendan 10y agoMy fav is IPMI. Many devices allow you to log in using cipher 0... basically, if you know the username, you get access. The rest... well, IMPI has a hash disclosure built into the protocol. If you can guess a username, you can get (and try to crack) the password.
- eth1 10y agoSo, I just did this. this is how i gained access to the ASA. ssh alsjfailjgfakjndfakldflkajd@10.1.1.1 and I was in. Then i did: en it asked for a password, and i typed: al;kdf;aklfjglkadfjglkadjfgljfglksjdf and i was in. kind of scary