john-users - Cisco ACS username: hash or crypt or.... and de-encoding?

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <18B2C6E38A3A324986B392B2D18ABC5102101E7178@fnb1mbx01.gci.com>
Date: Fri, 12 Apr 2013 09:38:38 -0800
From: Leif Sawyer <lsawyer@....com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Cisco ACS username:  hash or crypt or....   and de-encoding?

I looked through the archives but didn't see anything related...

For Cisco ACS 5, in the CLI administration, a "repository" is defined for the system
to pull or push backups and patches.

Part of the repo definition is an optional username and password (for ftp, say),
and is defined thusly:

ACS(config)#  repository test-ftp
ACS(config-repository)#   user TestUser password plain abc123

which looks like this afterward:

ACS(config)# do sho run | include TestUser
  user Testuser password hash 0c5eadecc96d64ebe2b9e1d3b636d6053e3898bb

I noted that Cisco calls it a 'hash'  -- but since it needs to be cleartext for the ftp process to use it,
wouldn't this be a misnomer?

In any case,  here's a handful of different  passwords and hashes, in case somebody can
do something with it:
--------
Cisco ACS 5.3  repository passwords:

!  user password password plain password
  user password password hash e047fabda9d3659e8d95a73223324f85149e394f
!
!  user test password plain test
  user test password hash 97dc37c94236ec1b4c56871c2e482cbd6f56bd33
!
!  user abc123 password plain abc123
  user abc123 password hash 0c5eadecc96d64ebe2b9e1d3b636d6053e3898bb
!
!  user longestpwalla password plain aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
  user longestpwalla password hash 9d0bd5a5c623b5d05e8b9f882ddf3873eab1460e
!
!  user shortpwalla password plain a
  user shortpwalla password hash 9d6afb513cd6b08be15f600545bba0496fd4efd5
!
!  user eightzeros password plain 00000000
  user eightzeros password hash 1614fab9117559699c1a6589a9b462871e9ccb30
!
!  user sevenzeroandone password plain 00000001
  user sevenzeroandone password hash 26ffcd3488ee3799629db606d5927bf73cf6a0bf

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.