Re: pen-testing cisco routers

[Ryan Russell <ryan () securityfocus com>]

On Thu, 24 May 2001, ruka + wrote:

> I've been doing pen-testing in a client, and we found a couple of
> CISCO routers w/ SNMP enabled (2500 and 1601).
>
> We have already extracted info about (IPs, routes, et al). Anyone
> knows if there?s a possibility to extract the configuration files
> trough snmp?

Yup.  If you've got write SNMP access, there are variables you can feed it
to give it a TFTP server to write it's config out to.  What version of IOS
are they running?

                                        Ryan