Pentesting Cisco 3640 devices via dialup ?

From: r00t@online.ie
Date: 07/30/02 

From: <r00t@online.ie>
Date: Tue, 30 Jul 2002 13:36:07 +0100
To: pen-test@securityfocus.com

Hi all,

Sorry to bother you with this quite basic question. I am pretty new to pen-
testing Remote Accss servers.

I am due to start a massive pen-testing project in two weeks, a small part of
the project requires pen-testing of Cisco 3640 devices over dialup.

I am looking for some assistance in how to brute force usernames / passwords
over dialup.

From what I know so far, by default Cisco devices will disconnect a user from a
dialup session after 3 unsucessfull authentication attempts, which means I need
to manually re-iniate the dialup connection every 50-60 seconds. I feel this
will be infeasable due to the time required to crack a single password.

Could anyone suggest a way to automate this. Or could anyone who has pen-tested
RAS servers over dialup specify an alternative method.

Any help what-so-ever is very much appreciated.

Thanks in advance

./Mark

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages