Penetration Testing mailing list archives

Re: pen-testing cisco routers

From: "ruka +" <ruka () my-deja com>
Date: Mon, 28 May 2001 07:12:56 -0700

Trough CDP, we found the version to be 10.3 for the 1006 and 11.0 for the 2500 machine.

Date: Fri, 25 May 2001 11:51:53 -0600 (MDT)
From: Ryan Russell <ryan () securityfocus com>
To: ruka + <ruka () my-deja com>
cc: <PEN-TEST () securityfocus com>
SUBJECT
On Thu, 24 May 2001, ruka + wrote:

I've been doing pen-testing in a client, and we found a couple of
CISCO routers w/ SNMP enabled (2500 and 1601).

We have already extracted info about (IPs, routes, et al). Anyone
knows if there´s a possibility to extract the configuration files
trough snmp?


Yup.  If you've got write SNMP access, there are variables you can feed it
to give it a TFTP server to write it's config out to.  What version of IOS
are they running?

    Ryan





------------------------------------------------------------
--== Sent via Deja.com ==--
http://www.deja.com/

Current thread:

pen-testing cisco routers ruka + (May 25)
- Re: pen-testing cisco routers Ryan Russell (May 25)
  - Re: pen-testing cisco routers Fyodor (May 25)
    - Re: pen-testing cisco routers Nelson Brito (May 26)
- <Possible follow-ups>
- Re: pen-testing cisco routers Mark Maher (May 25)
- Re: pen-testing cisco routers Test Working (May 27)
- Re: pen-testing cisco routers ruka + (May 28)