Software to find community string of config file

[cockneysean]

DiFileCPE is an all purpose config file editor and viewer. Using this application, you can drag-and-drop a config file into the main window and it will automatically display the contents of the config file for you to view. This application is most useful when you want to know the download and upload speeds of a config file, or the SNMP community string.

Interesting...

This application is most useful when you want to know the download and upload speeds of a config file, or the SNMP community string.

Haven't tried it yet, but it leapt out at me. I'm going to try it later when I have time. If anyone else tries it first, post results! Can be founf on the tcniso site.

[G77]

hmm, it does come up with a few strings when doing various things.

a couple are displayed at the bottom when you load it.

i cant test any of these thou as i can use any old garbage as my string. lol

[baked188]

Ive used this program for a while to view configs, Tried editing a couple of configs back when G77 first said it was doable, tried about 10 random things when it requests the string and it failed.

[/24]

This software wont beable to tell you the auth string to resign the config file it may beable to give you the community strings to view and edit some more SNMP MIB's

[MorriSoft]

Originally Posted by /24

This software wont beable to tell you the auth string to resign the config file it may beable to give you the community strings to view and edit some more SNMP MIB's

Interesting nonetheless though, might have to play tonight..

[TheCoder]

The community key is simply the public rsa key. Its not that difficult to find this value. Its basically only used to check that the config is authentic. You cant use it to create or sign new configs or for anything particularly useful.

[cockneysean]

Meh....

Worth a look anyways....

[sr20]

Originally Posted by TheCoder

The community key is simply the public rsa key. Its not that difficult to find this value. Its basically only used to check that the config is authentic. You cant use it to create or sign new configs or for anything particularly useful.

Eh? at the risk of looking like a fool, my understanding was this:

There is no such thing as a 'community key'

Community strings are only used to set snmp access rights and are 'woofread' and 'woofreadwrite' in all cases.

As for validating the configs, this involves computing the MD5 of the config together with the 'authentication string' (which we don't know). The computed MD5 is compared to the stated MD5.

This prevents modding of configs using vultureware etc.

RSA keypairs are only used in negotiating the TEK's for BPI.

Perfectly possible i'm mistaken tho.

sr20