RE: Firewall Netscreen 10 - URGENTLY

From: Rob Shein (shoten_at_starpower.net)
Date: 02/23/04

  • Next message: Chuck Fullerton: "Sam Spade.org" 
    To: "'Secdigital'" <secdigital@san.rr.com>, "'Ricardo'" <skydiver@dialdata.com.br>, <pen-test@securityfocus.com>
Date: Mon, 23 Feb 2004 15:01:09 -0500

    There was a thread on this a few months ago here; it's not quite as simple
    as that. It doesn't follow the standard of a normal MD5 hash. Check out the
    archives of the pen-test list, and search for netscreen hash MD5. I don't
    seem to remember that anyone actually managed to crack the password.

    > -----Original Message-----
    > From: Secdigital [mailto:secdigital@san.rr.com]
    > Sent: Sunday, February 22, 2004 8:26 PM
    > To: Ricardo; pen-test@securityfocus.com
    > Subject: Re: Firewall Netscreen 10 - URGENTLY
    >
    >
    > If you have a backup of your config, the password should be
    > in there, in the form of a MD5 Hash. Download a md5 brute
    > force tool and run it against it.
    >
    > Philip Bartholomew
    > Secdigital@san.rr.com
    > ----- Original Message -----
    > From: "Ricardo" <skydiver@dialdata.com.br>
    > To: <pen-test@securityfocus.com>
    > Sent: Sunday, February 22, 2004 1:12 PM
    > Subject: Firewall Netscreen 10 - URGENTLY
    >
    >
    > > Dear Colleagues,
    > >
    > >
    > > I am really needing your help.
    > >
    > > I`m in a position of not having the password for one of our
    > critical
    > > netscreen 10 firewall. Does anyone know of a way to obtain the
    > > password? Wiping the configuration completely is not an
    > option. I can
    > > also connect via a console cable if necessary.
    > >
    > > Any assistance will *greatly* appreciated!
    > >
    > > Regards,
    > >
    > > Richard
    > >
    > >
    > >
    > >
    > ----------------------------------------------------------------------
    > > ----
    > -
    > > Free trial: Astaro Security Linux -- firewall with Spam/Virus
    > > Protection
    > >
    > > Protect your network with the comprehensive security solution that
    > > integrates six applications for ease of use and lower TCO.
    > >
    > > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > > - Wireless security.
    > >
    > > Download 30-day evaluation at:
    > > http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
    > >
    > ----------------------------------------------------------------------
    > > ----
    > --
    > >
    >
    >
    > --------------------------------------------------------------
    > -------------
    > Free trial: Astaro Security Linux -- firewall with Spam/Virus
    > Protection
    >
    > Protect your network with the comprehensive security solution
    > that integrates six applications for ease of use and lower TCO.
    >
    > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > - Wireless security.
    >
    > Download 30-day evaluation at:
    > http://www.securityfocus.com/sponsor/Astaro_pe> n-test_040219
    >
    >
    > --------------------------------------------------------------
    > --------------
    >
    >
    >

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
    ----------------------------------------------------------------------------

  • Next message: Chuck Fullerton: "Sam Spade.org"

    Relevant Pages

    • Re: MBSA 1.2
      ... > I don't believe that Nessus scans for the presence of Windows patches. ... > detected over a network link. ...
      (Security-Basics)
    • RE: MBSA 1.2
      ... I'm using Nessus 2.0.6. ... >> detected over a network link. ...
      (Security-Basics)
    • RE: Firewall Netscreen 10 - URGENTLY
      ... The hash of the password is not MD5... ... Firewall Netscreen 10 - URGENTLY ... Astaro Security Linux -- firewall with Spam/Virus Protection ... Protect your network with the comprehensive security solution that ...
      (Pen-Test)
    • Re: Securing webmail - changing a port necessary to ensure security?
      ... you can secure it a lot more then OWA. ... Astaro Security Linux -- firewall with Spam/Virus Protection Protect your network with the comprehensive security solution that integrates six applications for ease of use and lower TCO. ...
      (Security-Basics)