Skip to main content
added 539 characters in body
Source Link

I'm totally confused by this Cisco password format:

enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d

Overall string is 40 bytes long:

$ echo -n 382fda4a4a26e6637edac0eb8b8ba4581087d32d | wc -c
  40

Example of configsconfig with these hashesthis password format can be seen e.g. here.
No

No special characters except for [a-z0-9]. It does not fall under any of Type X Cisco password taxonomy (Types 0,4,5,7,8,9). Hashcat does not include any available cracking mode for it.

What kind of voodoo is that? Is it secure? Should I be worried that original password string may be recovered?

P.S. There's suspicion that this is not hash, but encryption. This resource states that:

(use) password that is already encrypted from another configuration file of another device. This will allow you to configure the two switches with the same password.

In case if this is encryption, how new device can decrypt it then?

I'm totally confused by this Cisco password format:

enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d

Overall string is 40 bytes long:

$ echo -n 382fda4a4a26e6637edac0eb8b8ba4581087d32d | wc -c
  40

Example of configs with these hashes can be seen e.g. here.
No special characters except for [a-z0-9]. It does not fall under any of Type X Cisco password taxonomy (Types 0,4,5,7,8,9). Hashcat does not include any available cracking mode for it.

What kind of voodoo is that? Is it secure? Should I be worried that original password string may be recovered?

I'm totally confused by this Cisco password format:

enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d

Overall string is 40 bytes long:

$ echo -n 382fda4a4a26e6637edac0eb8b8ba4581087d32d | wc -c
  40

Example of config with this password format can be seen e.g. here.

No special characters except for [a-z0-9]. It does not fall under any of Type X Cisco password taxonomy (Types 0,4,5,7,8,9). Hashcat does not include any available cracking mode for it.

What kind of voodoo is that? Is it secure? Should I be worried that original password string may be recovered?

P.S. There's suspicion that this is not hash, but encryption. This resource states that:

(use) password that is already encrypted from another configuration file of another device. This will allow you to configure the two switches with the same password.

In case if this is encryption, how new device can decrypt it then?

Post Migrated Here from security.stackexchange.com (revisions)
Source Link

Confusing Cisco enable password format

I'm totally confused by this Cisco password format:

enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d

Overall string is 40 bytes long:

$ echo -n 382fda4a4a26e6637edac0eb8b8ba4581087d32d | wc -c
  40

Example of configs with these hashes can be seen e.g. here.
No special characters except for [a-z0-9]. It does not fall under any of Type X Cisco password taxonomy (Types 0,4,5,7,8,9). Hashcat does not include any available cracking mode for it.

What kind of voodoo is that? Is it secure? Should I be worried that original password string may be recovered?