Pentesting Cisco 3640 devices via dialup ?

From: r00tat_private
Date: Tue Jul 30 2002 - 05:36:07 PDT

  • Next message: Leonard Leblanc: "Buffer Overflow Help"

    Hi all,
    
    Sorry to bother you with this quite basic question. I am pretty new to pen-
    testing Remote Accss servers.
    
    I am due to start a massive pen-testing project in two weeks, a small part of 
    the project requires pen-testing of Cisco 3640 devices over dialup.
    
    I am looking for some assistance in how to brute force usernames / passwords 
    over dialup.
    
    From what I know so far, by default Cisco devices will disconnect a user from a 
    dialup session after 3 unsucessfull authentication attempts, which means I need 
    to manually re-iniate the dialup connection every 50-60 seconds. I feel this 
    will be infeasable due to the time required to crack a single password.
    
    Could anyone suggest a way to automate this. Or could anyone who has pen-tested 
    RAS servers over dialup specify an alternative method.
    
    Any help what-so-ever is very much appreciated.
    
    Thanks in advance
    
    ./Mark  
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Tue Jul 30 2002 - 07:59:25 PDT