Recovering Cisco Encrypted Passwords

Here a cool tip from the Group Study list.  If you need to recover a Cisco “service password-encryption” password (not a secret password) AND you don’t have access to a type 7 password decrypter – you can use the following method to decrypt the password:

r1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
r1(config)#username ivan pass cisco
r1(config)#service password-encryption
r1(config)#^Z
r1#sh run | i ivan
username ivan password 7 01100F175804
r1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
r1(config)#key chain REVERSE_ENG
r1(config-keychain)#key 1
r1(config-keychain-key)#key-string 7 01100F175804
r1(config-keychain-key)#^Z
r1#
r1#sh key chain REVERSE_ENG
Key-chain REVERSE_ENG:
    key 1 — text “cisco”
        accept lifetime (always valid) – (always valid) [valid now]
        send lifetime (always valid) – (always valid) [valid now]

Advertisements