Re: Serial Connection Password Cracker.

From: Philip Markwalder (philip.markwalder@celeris.ch)
Date: Thu May 16 2002 - 04:42:55 EDT


Hi

There is also a non-commercial solution: http://ser2net.sourceforge.net/

bye

Philip

Greg wrote:
> Software such as the following will let you to TCP 'connections' to a serial
> port.
>
> http://www.tglmicro.com/Inet2Com.htm
>
> This is a tcp socket server that redirects all I/O to a serial port. It's
> commerical, however there is a 30-day eval.
>
>
>
>
>
>
>>-----Original Message-----
>>From: Lists [mailto:fw1-list@ip9.co.uk]
>>Sent: 13 May 2002 22:56
>>To: pen-test@securityfocus.com; CMichal@oracular.com
>>Subject: Re: Serial Connection Password Cracker.
>>
>>
>>If you could somehow get it attached to the network (e.g. use nc
>>to connect
>>the serial port to a listening "socket") you could then try something like
>>brutus (http://www.hoobie.net/brutus/) and a word list, i think LC3
>>(http://www.atstake.com) had a nice one. I had to do something
>>similar once,
>>and i used a linux console server program to allow me to "telnet" to the
>>serial port, you might even be able to fudge something together
>>with a copy
>>of minicom if you have a linux box to hand - then just point brutus at it.
>>
>>
>>----- Original Message -----
>>From: <CMichal@oracular.com>
>>To: <pen-test@securityfocus.com>
>>Sent: Monday, May 13, 2002 7:24 PM
>>Subject: Serial Connection Password Cracker.
>>
>>
>>
>>>I'm looking for a program that can do a dictionary based attack on a
>>>device that is connected to a laptop via com port, serial port.
>>>Its a piece of hardware that has no lockout after successive bad
>>>passwords and there is no delay between try's.
>>>If there isn't a cracking program out there with this capability I guess
>>>I will have to write some software that will do it.
>>>
>>>Its a Panasonic KX-TVS75 phone system to be exact, I have the piece of
>>>hardware in my possession but I forgot the console password.
>>>
>>>-C
>>>
>>>
>>>
>>
>>--------------------------------------------------------------------------
>>--
>>
>>>This list is provided by the SecurityFocus Security Intelligence Alert
>>
>>(SIA)
>>
>>>Service. For more information on SecurityFocus' SIA service which
>>>automatically alerts you to the latest security vulnerabilities please
>>
>>see:
>>
>>>https://alerts.securityfocus.com/
>>>
>>>
>>
>>
>>------------------------------------------------------------------
>>----------
>>This list is provided by the SecurityFocus Security Intelligence
>>Alert (SIA)
>>Service. For more information on SecurityFocus' SIA service which
>>automatically alerts you to the latest security vulnerabilities
>>please see:
>>https://alerts.securityfocus.com/
>>
>
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please see:
> https://alerts.securityfocus.com/
>

-- 
Philip Markwalder
--
Celeris AG                             http://www.celeris.ch/
Studbachstrasse 13b                     Phone: +41 1 938 5720
CH-8340 Hinwil                            Fax: +41 1 938 5721




This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:21 EDT