Skip to main content
A
Anonymous_User
Contributor
January 30, 2009
Question

Decrypting Password in Conf files

  • January 30, 2009
  • 8 replies
  • 71096 views
Does anybody know how to decrypt a password in a Fortigate conf file? Long story short: WAN2 port running PPPoE and it' s been up for years. Nobody has the password. Conf file encrypts the password. Thanks Tim

    8 replies

    rwpatterson
    rwpatterson
    New Member
    January 30, 2009
    The password is hashed, and I don' t believe there is any way to reverse engineer it.
    MasterBratac
    MasterBratac
    New Member
    January 31, 2009
    I´dont think, that it´s hashed, because you need a plain text password, to transmit it to your pppoe provider .... It should be possible to recover the password by sniffing the wan port during dialup.
    rwpatterson
    rwpatterson
    New Member
    February 1, 2009
    That may be correct. I was thinking about the IPSec tunnel passwords....
    A
    Anonymous_UserAuthor
    Contributor
    January 30, 2009
    Thanks man. Thats what I thought but I wanted to put it out there. Tg
    FortiRack_Eric
    FortiRack_Eric
    New Member
    February 1, 2009
    It is hashed (of course) the fact that you have to enter a plain text password has nothing to do with it. But going back to the question. If you have access to the box you can make a backup unencrypted, password is optional. If you can' t backup then launch the CLI and do a show and capture the output. In case you don' t have all the config due to lower admin rights, modify the system admin section and add a new superuser. like conf sys administrator edit newadmin set profile superadmin set password 12345 next end Cheers, Eric
    nsumner
    nsumner
    New Member
    February 2, 2009
    Eric, You seem to be missing 2 things. They need the PPPoE password not a password on a conf file. Secondly it can not be simply a hash. Since by definition a hash is one way the backup of the conf file when encrypted isn' t a simple hash, and the PPPoE password isn' t a simple hash. In fact it must be 100% reversible. However that doesn' t mean we know how to reverse it. It may be simple or it may be very difficult (though for the PPPoE password they don' t want to waste to much CPU on reversing the encryption...
    FortiRack_Eric
    FortiRack_Eric
    New Member
    February 2, 2009
    LOL... It was late last night... obviously. I tested it and the PPPoE password is encrypted. Fortinet isn' t going to tell you what the algorithm is. So why don' t ask the password from your providor. Cheers, Eric
    red_adair
    red_adair
    New Member
    February 3, 2009
    #diag debug enable #diag debug app ppp 3 .1 drop the PPPoE Link .2 re-connect -> The PPPd debug should tell you the PW for PPPoE auth in cleartext Doesn' t answer your question - but solves your problem :) -R.
    wcente
    wcente
    New Member
    February 10, 2009
    And, in addition to that, generally you can connect any pppoe device, the modem and a laptop with a sniffer to a hub (it must be a hub, not a switch), than you can capture the packets and find out the password cleartext by analyzing the collected packets. hard but possible
    nsumner
    nsumner
    New Member
    February 13, 2009
    #diag debug enable #diag debug app ppp 3 .1 drop the PPPoE Link .2 re-connect -> The PPPd debug should tell you the PW for PPPoE auth in cleartext Doesn' t answer your question - but solves your problem :) -R.
    Red, with people like you giving people the easy way out how are people supposed to learn to use a sniffer and be more dangerous
    Terms & ConditionsAccessibility statement