CISCO ASA Enable Fix
#1
Can developers modify the CSICO ASA module (2410) to allow for no username/salt when running a hash.  The ASA enable password is the same format as the username/password hash, but has no username. If a hash is attempted without the salt hashcat throws some length error and won't allow a NULL value for the username portion.

Example:

hashcat64.bin -m2410 -a3 XXXXXXXXXXXXXXXX:

*note after the colon is blank since the enable password has no username and therefore no salt (salt is based on username)

Result:

Hash 'XXXXXXXXXXXXXXXX:': Token length exception

Thanks for any insight/fixes
Reply


Messages In This Thread
CISCO ASA Enable Fix - by Gmoney - 07-18-2019, 03:37 AM
RE: CISCO ASA Enable Fix - by philsmd - 07-18-2019, 06:56 AM
RE: CISCO ASA Enable Fix - by Gmoney - 07-19-2019, 12:04 AM
RE: CISCO ASA Enable Fix - by philsmd - 07-19-2019, 02:58 AM
RE: CISCO ASA Enable Fix - by Gmoney - 07-19-2019, 01:08 PM
RE: CISCO ASA Enable Fix - by Gmoney - 07-19-2019, 01:39 PM