The technical staff at a client of ours resigned. They left a list of about 40 passwords and variations but we do not know which accounts or machines they belong to.
Ideally we want to minimize downtime to reboot and reset passwords. Especially since we don't know how things are configured in case say a switch config was not saved.
There are Linux servers, switches, and routers. I don't want to manually try every combination. It's tedious but I am more worried I will make a typo and miss an account.
I was thinking of writing a script using some modules like Net::Telnet::Cisco
, and Net::Telnet
. Then it hit me there is probably already a program like this. Any suggestions?
Thanks to everyone who posted a useful reply. Someone recommended http://freeworld.thc.org/thc-hydra/
. It can read files of usernames and passwords so we can avoid writing code. It still looks like we will be rebooting some machines to reset passwords. mr_mischief
, good idea to drop in a machine acting as a transparent bridge running a packet dumper on interfaces as needed. To address the suggestions to work with the previous admin, sometimes people are not willing to work together.