How would you proceed?

The network administrator at Spears Technology, Inc has configured the default gateway Cisco router’s access-list as below:

You are hired to conduct security testing on their network. You successfully brute-force the SNMP community string using a SNMP crack tool. The access-list configured at the router prevents you from establishing a successful connection. You want to retrieve the Cisco configuration from the router.

How would you proceed?
A . Use the Cisco’s TFTP default password to connect and download the configuration file
B . Run a network sniffer and capture the returned traffic with the configuration file from the router
C . Run Generic Routing Encapsulation (GRE) tunneling protocol from your computer to the router masking your IP address
D . Send a customized SNMP set request with a spoofed source IP address in the range ­192.168.1.0

View Answer

Answer: B,D