So I'll introduce you to the last example of compromising S&P, let's try to grab the S&P configuration
of the Cisco router using Métis Boyd framework.
Métis Boyte project is the most used penetration testing framework of, well, the whole world, it
can be used to test the vulnerability of computer systems or break into remote systems is best known.
Subprojects is the open source Métis Boit framework.
As a tool for developing and executing exploit code against a remote target machine.
So here we have our network prepared by Ginés three again, we'll perform this demo on this network
because look at that, it's right here.
To go to college and open a terminal screen type MSF console and press enter to start Métis Boit framework's
console application.
So now we have a shell like MSF environment, we can run the MSF console commands in this environment.
Now, because it's the subject of exploitation and exploitation, of course, that I did, I won't go
into deep detail about Métis boy right now, but I will talk about certain applicable points.
We'll use a module to collect the configuration of the router.
I don't remember the exact name of it, so why don't we search for Cisco and config keywords?
We find an auxiliary module, auxiliary modules are not to exploit a vulnerability, but to gather some
information and to help the pin tester figure out the systems and the vulnerabilities.
So use the use keyword with the entire module name.
Command prompt is changed as the module name now.
Type show options to see the options we should set before running the module.
The community option is required and is public by default, but let's set it as private.
Set output directory option to save the results in a file, so I'll choose the desktop as the output
directory.
Now set the remote host the IP address of the target router.
Our report is one six, one by default, which is definitely OK with us and leave the other options
with the default values.
Now we're ready type run to run the module.
Auxiliary module execution completed and the configuration file is saved to the output directory and
this example, of course, to the desktop.
So here's the file, double click it to open it.
Welcome to the configuration of the router.
We don't have any credential on our router yet, so let's close the file now.
Go to the router console and create a user, then collect the config file again and just see how a user
is saved in the config file.
So I'm in the GNC three emulator in my whole system, which is a Mac, and I'll go to the console of
the router and just create a user.
Of course, we need to enter the configure terminal mode first, so type username.
Well, to understand the comment, I'll put a question mark at the end of each word username is expected.
Let's give it an exceptional username.
How about Cisco?
Question mark, once again, these are the next options.
OK, we want to specify a password for the user so we can use either password or secret as the keywords
to set a password.
I'll tell you, there differences soon, but let's just use password as a keyword for now.
Yeah, let's just keep the passwords simple for now, one, two, three, four, five, or wait, maybe
that's just too popular.
In any event, just press enter.
Now, to identify the privileges of the user type user name Cisco.
Privilege 15, where 15 stands for the complete control over the router.
OK, now let's go to college and run the auxiliary module again.
So it's all finished and the output file is created, if there's a fire with the same name, it's overwritten.
So just be aware of that double click on the file and look at the configuration of the router again.
And look at that, the entire configuration of the router and look at the rose more carefully.
Yep, there it is, the credential we created just a couple of minutes ago says, you see the password
is saved as clear text and as hackers, we learned the username and password remotely.
Now, does it have to be like this?
I mean, are the credentials of the users always stored as clear text in the Cisco config?
The answer is of course not.
So I'm going to show you the ways to keep the password data secure.
Better pay attention.