Mailing List Archive: nsp: juniper

Decode $9$ encrypted Junos secrets

Index | Next | Previous | View Threaded

lists at beatmixed

Mar 19, 2012, 2:23 PM

Post #1 of 6 (1278 views)
Permalink

Decode $9$ encrypted Junos secrets

Greetings,

Threw this together a few days ago to recover $9$ encrypted Junos
passwords (RADIUS secrets, BGP MD5's, etc.).

It is ported from this Perl library:

http://cpansearch.perl.org/src/KBRINT/Crypt-Juniper-0.02/lib/Crypt/Juniper.pm

to a Python 2.7 script:

https://github.com/mhite/junosdecode

Remember to escape your $'s on the CLI when launching the script:

$ ./junosdecode.py \$9\$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
junos password decrypter
python version by matt hite
original perl version by kevin brintnall

encrypted version: $9$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
decrypted version: ju&iper123

Thanks,

-M
_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

dlockuan at gmail

Mar 19, 2012, 2:51 PM

Post #2 of 6 (1253 views)
Permalink

Re: Decode $9$ encrypted Junos secrets [In reply to]

Thanks Matt,

This is a good tool.

Best regards,

---
David

On Mon, Mar 19, 2012 at 4:23 PM, Matt Hite <lists [at] beatmixed> wrote:

> Greetings,
>
> Threw this together a few days ago to recover $9$ encrypted Junos
> passwords (RADIUS secrets, BGP MD5's, etc.).
>
> It is ported from this Perl library:
>
>
> http://cpansearch.perl.org/src/KBRINT/Crypt-Juniper-0.02/lib/Crypt/Juniper.pm
>
> to a Python 2.7 script:
>
> https://github.com/mhite/junosdecode
>
> Remember to escape your $'s on the CLI when launching the script:
>
> $ ./junosdecode.py \$9\$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
> junos password decrypter
> python version by matt hite
> original perl version by kevin brintnall
>
> encrypted version: $9$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
> decrypted version: ju&iper123
>
> Thanks,
>
> -M
> _______________________________________________
> juniper-nsp mailing list juniper-nsp [at] puck
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

lists at beatmixed

Mar 20, 2012, 9:45 AM

Post #3 of 6 (1247 views)
Permalink

Re: Decode $9$ encrypted Junos secrets [In reply to]

No problem -- glad to share.

It's interesting to note just how many things are stored in $9$
encrypted format: RADIUS secrets, IS-IS authentication keys, BGP MD5
secrets, etc.

-M

On Mon, Mar 19, 2012 at 2:51 PM, David Lockuan <dlockuan [at] gmail> wrote:
> Thanks Matt,
>
> This is a good tool.
>
> Best regards,
>
> ---
> David
>
>
> On Mon, Mar 19, 2012 at 4:23 PM, Matt Hite <lists [at] beatmixed> wrote:
>>
>> Greetings,
>>
>> Threw this together a few days ago to recover $9$ encrypted Junos
>> passwords (RADIUS secrets, BGP MD5's, etc.).
>>
>> It is ported from this Perl library:
>>
>>
>> http://cpansearch.perl.org/src/KBRINT/Crypt-Juniper-0.02/lib/Crypt/Juniper.pm
>>
>> to a Python 2.7 script:
>>
>> https://github.com/mhite/junosdecode
>>
>> Remember to escape your $'s on the CLI when launching the script:
>>
>> $ ./junosdecode.py \$9\$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
>> junos password decrypter
>> python version by matt hite
>> original perl version by kevin brintnall
>>
>> encrypted version: $9$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI
>> decrypted version: ju&iper123
>>
>> Thanks,
>>
>> -M
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp [at] puck
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

phil at juniper

Mar 20, 2012, 10:54 AM

Post #4 of 6 (1247 views)
Permalink

Re: Decode $9$ encrypted Junos secrets [In reply to]

Matt Hite writes:
>It's interesting to note just how many things are stored in $9$
>encrypted format: RADIUS secrets, IS-IS authentication keys, BGP MD5
>secrets, etc.

It's really obfuscation, not encryption. These are values that
have to be available in raw form to various software components.
So we have this "unreadable" type that obfuscates the values so
someone looking over your shoulder won't immediately know your
secrets.

In contrast, user passwords are encrypted in a "one way" method
using the normal md5 hash marker ("$1$"). These cannot be
reversed like the $9$ values.

Thanks,
Phil
_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

lists at beatmixed

Mar 20, 2012, 2:15 PM

Post #5 of 6 (1242 views)
Permalink

Re: Decode $9$ encrypted Junos secrets [In reply to]

On Tue, Mar 20, 2012 at 10:54 AM, Phil Shafer <phil [at] juniper> wrote:
> Matt Hite writes:
>>It's interesting to note just how many things are stored in $9$
>>encrypted format: RADIUS secrets, IS-IS authentication keys, BGP MD5
>>secrets, etc.
>
> It's really obfuscation, not encryption. �These are values that
> have to be available in raw form to various software components.
> So we have this "unreadable" type that obfuscates the values so
> someone looking over your shoulder won't immediately know your
> secrets.
>
> In contrast, user passwords are encrypted in a "one way" method
> using the normal md5 hash marker ("$1$"). � These cannot be
> reversed like the $9$ values.

Absolutely. Your clarification is appreciated.

-M

_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

chris at nmedia

Mar 20, 2012, 4:16 PM

Post #6 of 6 (1252 views)
Permalink

Re: Decode $9$ encrypted Junos secrets [In reply to]

For one-way hash:

http://www.openwall.com/john/

Matt Hite [lists [at] beatmixed] wrote:
> On Tue, Mar 20, 2012 at 10:54 AM, Phil Shafer <phil [at] juniper> wrote:
> > Matt Hite writes:
> >>It's interesting to note just how many things are stored in $9$
> >>encrypted format: RADIUS secrets, IS-IS authentication keys, BGP MD5
> >>secrets, etc.
> >
> > It's really obfuscation, not encryption. ?These are values that
> > have to be available in raw form to various software components.
> > So we have this "unreadable" type that obfuscates the values so
> > someone looking over your shoulder won't immediately know your
> > secrets.
> >
> > In contrast, user passwords are encrypted in a "one way" method
> > using the normal md5 hash marker ("$1$"). ? These cannot be
> > reversed like the $9$ values.
>
> Absolutely. Your clarification is appreciated.
>
> -M
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp [at] puck
> https://puck.nether.net/mailman/listinfo/juniper-nsp

--
The language of the totalist environment is characterized by the thought-terminating cliche. The most far-reaching and complex of human problems are compressed into brief, highly reductive, definitive-sounding phrases, easily memorized and easily expressed. These become the start and finish of any ideological analysis. - Robert Jay Lifton
_______________________________________________
juniper-nsp mailing list juniper-nsp [at] puck
https://puck.nether.net/mailman/listinfo/juniper-nsp

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads