Tuesday, March 23, 2010
Decrypt Cisco IOS type 7 passwords on a router
I saw this once on the net and thought it could come in handy... Pitty it can't be done with type-5 passwords.
Turn on type-7 encryption for local passwords and create a temp username:
key 1 -- text "testuser:decyptedpassword"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]
Turn on type-7 encryption for local passwords and create a temp username:
Router1(config)#service password-encryption
Router1(config)#username tempuser password !@&*^&*^$#
Show the created username with the show running config command:Router1(config)#do show run | include username username tempuser password 7 -encrypted string-
Create a key chain and enter the type-7 encrypted password as the key string:Router1(config)#key chain decrypt
Router1(config-keychain)#key 1
Router1(config-keychain-key)#key-string 7 -encrypted string-
The show command will now do the decryption:Router1(config-keychain-key)#do show key chain decrypt
Key-chain decrypt:key 1 -- text "testuser:decyptedpassword"
accept lifetime (always valid) - (always valid) [valid now]
send lifetime (always valid) - (always valid) [valid now]