RE: Firewall Netscreen 10 - URGENTLY

From: John Petropoulos (jpetropoulos_at_jetnet.ca)
Date: 02/23/04

  • Next message: MARTIN M. Bénoni: "RE: nessus which plug'in reports which vulnerability?"
    To: 'Secdigital' <secdigital@san.rr.com>, Ricardo <skydiver@dialdata.com.br>, pen-test@securityfocus.com
    Date: Mon, 23 Feb 2004 10:26:39 -0500
    
    

    The hash of the password is not MD5... Check the Pen-test list for some
    more info on that.

    As for the password issue... Brute force is the only way.

    -----Original Message-----
    From: Secdigital [mailto:secdigital@san.rr.com]
    Sent: February 22, 2004 8:26 PM
    To: Ricardo; pen-test@securityfocus.com
    Subject: Re: Firewall Netscreen 10 - URGENTLY

    If you have a backup of your config, the password should be in there, in the
    form of a MD5 Hash. Download a md5 brute force tool and run it against it.

    Philip Bartholomew
    Secdigital@san.rr.com
    ----- Original Message -----
    From: "Ricardo" <skydiver@dialdata.com.br>
    To: <pen-test@securityfocus.com>
    Sent: Sunday, February 22, 2004 1:12 PM
    Subject: Firewall Netscreen 10 - URGENTLY

    > Dear Colleagues,
    >
    >
    > I am really needing your help.
    >
    > I`m in a position of not having the password for one of our critical
    > netscreen 10 firewall. Does anyone know of a way to obtain the
    > password? Wiping the configuration completely is not an option. I can
    > also connect via a console cable if necessary.
    >
    > Any assistance will *greatly* appreciated!
    >
    > Regards,
    >
    > Richard
    >
    >
    >
    > ----------------------------------------------------------------------
    > ----
    -
    > Free trial: Astaro Security Linux -- firewall with Spam/Virus
    > Protection
    >
    > Protect your network with the comprehensive security solution that
    > integrates six applications for ease of use and lower TCO.
    >
    > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > - Wireless security.
    >
    > Download 30-day evaluation at:
    > http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
    > ----------------------------------------------------------------------
    > ----

    --
    >
    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.
    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.
    Download 30-day evaluation at:
    http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.
    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.
    Download 30-day evaluation at:
    http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
    ----------------------------------------------------------------------------
    

  • Next message: MARTIN M. Bénoni: "RE: nessus which plug'in reports which vulnerability?"

    Relevant Pages

    • Re: MBSA 1.2
      ... > I don't believe that Nessus scans for the presence of Windows patches. ... > detected over a network link. ...
      (Security-Basics)
    • RE: Firewall Netscreen 10 - URGENTLY
      ... It doesn't follow the standard of a normal MD5 hash. ... > Protect your network with the comprehensive security solution ... > that integrates six applications for ease of use and lower TCO. ...
      (Pen-Test)
    • RE: MBSA 1.2
      ... I'm using Nessus 2.0.6. ... >> detected over a network link. ...
      (Security-Basics)
    • Re: Securing webmail - changing a port necessary to ensure security?
      ... you can secure it a lot more then OWA. ... Astaro Security Linux -- firewall with Spam/Virus Protection Protect your network with the comprehensive security solution that integrates six applications for ease of use and lower TCO. ...
      (Security-Basics)
    • Re: Securing webmail - changing a port necessary to ensure security?
      ... Many org's have such firewall / proxy settings... ... > Protect your network with the comprehensive security solution that ... Astaro Security Linux -- firewall with Spam/Virus Protection ... Protect your network with the comprehensive security solution that ...
      (Security-Basics)