Cisco route switching hack password step

Cisco 2800 Password cracking

1. Restart the router byCtrl + BREAK +FNKey to enter monitoring mode

2. Modify the Register value to change the start order
Remmon>confreg 0x2142

3. Restart Routing in monitoring mode
Remmon>reset

Look, here we go into the system. User mode no password
Router>enable
router#Copy Start Running-config
Destination filename [running-config]?
552 bytes copied in 0.416 secs (1326 bytes/sec)
We enter enable to enter the privileged mode input command copy start Running-config from the NVRAM inside the call configuration into memory

4. Next Change Password
Router#conf T
Router (config) #line console 0
Router (config-line) #password admin
Router (Config-line) #login
Router (Config-line) #exit
Router (config) #enable secret admin

5. Change the register value back to the normal boot order
Ru1 (config) #Config-register 0x2102

6, save the configuration to the NVRAM inside
Ru1 (config) #exit
Ru1#write

7. Re-start
Router#reload
Proceed with reload? [Confirm]
Press RETURN to get started!
User Access Verification
Password:
router#

Comments:

If the router is 2000, 2500, 3000, 680x0 based 4000, 7000 series, the iOS version is 10.0 or the "rommom>" prompt appears, type the following command:
ROMMOM>O/R 0x2142
Rommom> I

If the router is 1003, 1004, 3600, 4500, 4700, 72XX, 75XX Series or a "rommom>" prompt appears, type the following command:
Rommon>confreg 0x2142
Rommon>reset

Graphic:

650) this.width=650; "src=" http://s4.51cto.com/wyfs02/M01/82/22/wKioL1dMVQHjM6W7AADmyVlPchA204.jpg "title=" 55.jpg "alt=" Wkiol1dmvqhjm6w7aadmyvlpcha204.jpg "/>

Cisco S2960 Password cracking
1, power off, press and hold the model key until switch: mode appears

2. Empty Flash Card
SwitchFlash_init


3. View Flash Content
Switch:dir Flash:
Directory of flash:/
2-RWX 1481 <date>config.text.renamed
3-RWX 5 <date> private-config.text.renamed
7 drwx 192 <date> C2960-LANBASE-MZ.122-35.SE5
24178176 bytes available (8335872 bytes used)

4. Rename the password file namedConfig.text.renamed.old, and view
Switch:rename flash:config.text.renamedFlash:config.text.renamed.old
Switch:dir Flash:
Directory of flash:/
2-RWX 1481 <date>Config.text.renamed.old
3-RWX 5 <date> private-config.text.renamed
7 drwx 192 <date> C2960-LANBASE-MZ.122-35.SE5
24178176 bytes available (8335872 bytes used)

5. Restart
Switch:boot

6, enter the privileged mode, and will modify the original file nameconfig.text.renamed, change back to
Would to enter the initial configuration dialog? [Yes/no]: N
Switch>enable
Switch#rename Flash:config.text.renamed.old Flash:config.text.renamed
switch#copy flash:config.text.renamed system:running-config
Destination filename [running-config]?

Cisco route switching hack password step