Cisco VPN Client Password Decryption

Published 10.01.2005 by jm | E-mail this post

This is the Cisco VPN Client Password Decryption algorithm. Evilscientists.de developed decryption sourcecode for this.

The algorithm which is used to encrypt a given user/group password is shown below (for further details just visit the source code):
* The current date as a string is retrieved (e.g. Mon Sep 19 20:00:00 2005)
* Then a SHA-1 Hash h1 is computed (20 Bytes)
* h1 is modified and a new Hash h2 is calculated
* h1 is again modified and h3 is calculated
* the 3DES key is made of h2 and the first 4 bytes of h3
* The password is encrypted using 3DES in CBC Mode. The IV consists of the first 8 Bytes from h1.
* The algorithm computes a last hash h4 from the encrypted pasword
* The key enc_UserPassword in our profile file now looks like ths: h1h4encrypted password

If the human body was never exposed to ailments, it would be impressivly vulnerable to the slightest cold. If our country was never exposed to hacking, it would be oppressivly vulnerable to cyber terrorism. With out the creation of a malicious hacking, Afganistan could have destroyed America's economy with a ping flood. This is why I encourange maclicious hacking, as an ethical practice. Without strengthening our defenses, we are weak. This site is focused on security through knowledge. I detest the fact that so many companies are being exploited because malicious hackers know their security holes before they do. For that reason, I hope to educate where the exploits lay. This isn't a 100% information base, as I only publish things I have been able to implement on myself. No credit is needed anywhere . However if you are a publisher, I would appriciate credit. I am an advocate of open source, so copy and paste and call it your own if you like. If my work is good enough for you to plagerize then that is my biggest compliment . If my work is good enough, I will be approached and asked to write more ... this is natural selection of the digital age .

Previous hacks

Previous Hacks

This link kills spam

spam IP addresses

Cost of the War in Iraq

(JavaScript Error)

Two very recommended books:

. . The only hacking forum I have found worth mentioning here