/usr/java/default/bin/keytool -import -trustcacerts -file -alias CA_ALIAS -keystore /usr/java/default/lib/security/cacerts -storepass changeit
More:
openssl s_client -connect:IPAddress:443
after connection is established, type in “HEAD / HTTP/1.0” and press enter.
Alternative:
echo -e "HEAD / HTTP/1.0\n\n" | openssl s_client -quiet -connect IPAddress:443
openssl s_client -connect:IPAddress:563
openssl s_client -connect:IPAddress:993
openssl s_client -connect:IPAddress:995
openssl s_client -connect website:443 -cipher EXPORT40 openssl s_client -connect website:443 -cipher NULL openssl s_client -connect website:443 -cipher HIGH
openssl passwd -1 -salt QIGCa pippo
output: $1$QIGCa$/ruJs8AvmrkmzKTzM2TYE.
openssl pkcs12 -in CertFile.p12 -out NewCertFile.pem -nodes. -cacerts
openssl x509 -in CertFile.crt. -inform DER -out NewCertName.pem -outform PEM
openssl s_client-connect ProxyHostname:port proxycert.pem
openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
cp server.key server.key.org openssl rsa -in server.key.org -out server.key
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt cat server.crt server.key > certificate.pem
cat INFILE | openssl aes-256-ecb -salt -k PASSWORD > INFILE.ssl
cat INFILE.ssl | openssl aes-256-ecb -d -k PASSWORD > INFILE
>>> from passlib.hash import sha256_crypt
>>> hash = sha256_crypt.encrypt("password")
>>> hash
'$5$rounds=80000$9GPMLb8EE.1QFrUk$Y0XQiZRKMhOrB2GcfCeWREG.x3jCfa5pbmxSO/hjCE3'
>>> sha256_crypt.encrypt("password")
'$5$rounds=80000$9fjOxTQNeyPhsCvp$XmyKju3TfWUEPXGPXMZ6sIPcv26Uok7NLPyZhx5g7R9'
>>> sha256_crypt.encrypt("password", rounds=12345)
'$5$rounds=12345$Kk9DTJPMRyxGFB3q$7tdzdJXq4YRu7ms6PGo7zTlOHVwYOQO1aUeUsZ3Mrl5'
>>> sha256_crypt.verify("password", hash)
True
>>> sha256_crypt.verify("letmeinplz", hash)
False
>>> from passlib.hash import atlassian_pbkdf2_sha1
>>> atlassian_pbkdf2_sha1.encrypt("password")
'{PKCS5S2}fU8ppRTCuJeS8n7PGYOQMhVqZ4hUidTIiWI4K8R8IBOXm/lYywaouSLtvlTeTr3V'
>>> atlassian_pbkdf2_sha1.encrypt("password")
'{PKCS5S2}+X+PMcYYAwBAKIWwFsJY639EipU1NXJfc1jKC5VYHZV7zoDI4zTEpKO4xZQoegg1'
>>> atlassian_pbkdf2_sha1.encrypt("password")
'{PKCS5S2}1Nq7N2YM4ZyTstZaSynlnGGh2rgAG+b7SB+9xreszUhrE39BnfwNg2RGm6tqvDg2'
>>> atlassian_pbkdf2_sha1.encrypt("password")
'{PKCS5S2}bu1dK0WotXYuBaB0bo2RslxMAp4JawLofUFw4S5fZdAtfsm3Ats6kO6j5NaHZCdt'
>>> atlassian_pbkdf2_sha1.encrypt("password")
'{PKCS5S2}z/mfc47xvjcm5Ny7dw7BeExB68Oc4XiTJvUS5HRAadKr4/Aomn1WOMMrMWtikUPK'
Sources:
Passwords related postings at this blog:
Source: http://insecure.org/sploits/cisco.passwords.html
Description: Cisco passwords can be trivially decrypted although this isn't really the fault of Cisco (since the router itself needs to be able to decrypt them). Author: Jared Mauch Compromise: Obtain extra access to Cisco routers Vulnerable Systems: Cisco routers Date: 11 November 1997
/* This code is originally from a Bugtraq post by
Jared Mauch . I patched it with an improved
translation table by Janos Zsako
-Fyodor (fyodor@insecure.org) */
#include
#include
char xlat[] = {
0x64, 0x73, 0x66, 0x64, 0x3b, 0x6b, 0x66, 0x6f,
0x41, 0x2c, 0x2e, 0x69, 0x79, 0x65, 0x77, 0x72,
0x6b, 0x6c, 0x64, 0x4a, 0x4b, 0x44, 0x48, 0x53 , 0x55, 0x42
};
char pw_str1[] = " password 7 ";
char pw_str2[] = "enable password 7 ";
char pw_str3[] = "ip ftp password 7 ";
char pw_str4[] = " ip ospf message-digest-key 1 md5 7 ";
char *pname;
cdecrypt(enc_pw, dec_pw)
char *enc_pw;
char *dec_pw;
{
unsigned int seed, i, val = 0;
if(strlen(enc_pw) & 1)
return(-1);
seed = (enc_pw[0] - '0') * 10 + enc_pw[1] - '0';
if (seed > 15 || !isdigit(enc_pw[0]) || !isdigit(enc_pw[1]))
return(-1);
for (i = 2 ; i = 'A' && enc_pw[i] <= 'F') {
val += enc_pw[i] - 'A' + 10;
continue;
}
if(strlen(enc_pw) != i)
return(-1);
}
dec_pw[++i / 2] = 0;
return(0);
}
usage()
{
fprintf(stdout, "Usage: %s -p \n", pname);
fprintf(stdout, " %s \n", pname);
return(0);
}
main(argc,argv)
int argc;
char **argv;
{
FILE *in = stdin, *out = stdout;
char line[257];
char passwd[65];
unsigned int i, pw_pos;
pname = argv[0];
if(argc > 1)
{
if(argc > 3) {
usage();
exit(1);
}
if(argv[1][0] == '-')
{
switch(argv[1][1]) {
case 'h':
usage();
break;
case 'p':
bzero(passwd, sizeof(passwd));
if(cdecrypt(argv[2], passwd)) {
fprintf(stderr, "Error.\n");
exit(1);
}
fprintf(stdout, "password: %s\n", passwd);
break;
default:
fprintf(stderr, "%s: unknow option.", pname);
}
return(0);
}
if((in = fopen(argv[1], "rt")) == NULL)
exit(1);
if(argc > 2)
if((out = fopen(argv[2], "wt")) == NULL)
exit(1);
}
while(1) {
for(i = 0; i < 256; i++) {
if((line[i] = fgetc(in)) == EOF) {
if(i)
break;
fclose(in);
fclose(out);
return(0);
}
if(line[i] == '\r')
i--;
if(line[i] == '\n')
break;
}
pw_pos = 0;
line[i] = 0;
if(!strncmp(line, pw_str1, strlen(pw_str1)))
pw_pos = strlen(pw_str1);
if(!strncmp(line, pw_str2, strlen(pw_str2)))
pw_pos = strlen(pw_str2);
if(!strncmp(line, pw_str3, strlen(pw_str3)))
pw_pos = strlen(pw_str3);
if(!strncmp(line, pw_str4, strlen(pw_str4)))
pw_pos = strlen(pw_str4);
if(!pw_pos) {
fprintf(stdout, "%s\n", line);
continue;
}
bzero(passwd, sizeof(passwd));
if(cdecrypt(&line[pw_pos], passwd)) {
fprintf(stderr, "Error.\n");
exit(1);
}
else {
if(pw_pos == strlen(pw_str1))
fprintf(out, "%s", pw_str1);
else if (pw_pos == strlen(pw_str2))
fprintf(out, "%s", pw_str2);
else if (pw_pos == strlen(pw_str3))
fprintf(out, "%s", pw_str3);
else if (pw_pos == strlen(pw_str4))
fprintf(out, "%s", pw_str4);
fprintf(out, "%s\n", passwd);
}
}
}
|
Also see http://freeworld.thc.org/root/tools/ciscocrack.c
Related: https://eikonal.wordpress.com/2010/05/21/cisco-%e2%80%9cpassword-7%e2%80%b3/
Local info:
#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
|
A 2-line version:
print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`
|
.
Source: http://www.ifm.net.nz/cookbooks/passwordcracker.html
<script language="JavaScript1.2" type="text/javascript">
<!--
// Is the character a digit?
function isDigit(theDigit)
{
var digitArray = new Array('0','1','2','3','4','5','6','7','8','9')
for (j = 0; j < digitArray.length; j++) {
if (theDigit == digitArray[j])
return true
}
return false
}
// Generate a config file ready for loading
function crackPassword(form)
{
var crypttext=form.crypttext.value.toUpperCase()
var plaintext=''
var xlat="dsfd;kfoA,.iyewrkldJKDHSUBsgvca69834ncxv9873254k;fg87"
var seed, i, val=0
if(crypttext.length & 1)
return
seed = (crypttext.charCodeAt(0) - 0x30) * 10 + crypttext.charCodeAt(1) - 0x30
if (seed > 15 || !isDigit(crypttext.charAt(0)) || !isDigit(crypttext.charAt(1)))
return
for (i = 2 ; i <= crypttext.length; i++) {
if(i !=2 && !(i & 1)) {
plaintext+=String.fromCharCode(val ^ xlat.charCodeAt(seed++))
seed%=xlat.length
val = 0;
}
val *= 16
if(isDigit(crypttext.charAt(i))) {
val += crypttext.charCodeAt(i) - 0x30
continue
}
if(crypttext.charCodeAt(i) >= 0x41 && crypttext.charCodeAt(i) <= 0x46) {
val += crypttext.charCodeAt(i) - 0x41 + 0x0a
continue
}
if(crypttext.length != i)
return
}
form.plaintext.value=plaintext
}
-->
</script>
<form name="never-you-mind" id="never-you-mind" action="#">
<table border="1">
<tbody><tr><td>
<p>
Type 7 Password:
<input name="crypttext" size="60" type="text">
</p>
<p>
<input value="Crack Password" onclick="crackPassword(this.form)" type="button">
</p>
<p>Plain text:
<input name="plaintext" size="40" type="text">
</p>
</td></tr></tbody></table>
</form>
|
Related: https://eikonal.wordpress.com/2010/05/21/cisco-%e2%80%9cpassword-7%e2%80%b3/
Eikonal Blog 