<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I've posted the updated UCOS Password Decrypter to the site. If you click "Select Host", it will ask for the target system hostname, remote user and passphrase. <span style="font-family: Calibri, Helvetica, sans-serif; background-color: rgb(255, 255, 255); display: inline !important">Although
it won't work with systems patched since earlier this year, it should still be useful for some.</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
<a href="https://www.adhdtech.com/uctools.html" id="LPNoLP375327">https://www.adhdtech.com/uctools.html</a><br>
<br>
</div>
<div style="font-family: EmojiFont, Calibri, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 12pt; color: rgb(0, 0, 0);">
Good news is that I found another method for extracting the files that works even with newer systems. Tested it last night with a non-rooted, bone stock 12.0(1)su2 install; works beautifully. Will try to get it out in time for Christmas.
<span>😊</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> cisco-voip <cisco-voip-bounces@puck.nether.net> on behalf of Pete Brown <jpb@chykn.com><br>
<b>Sent:</b> Friday, December 7, 2018 10:19 AM<br>
<b>To:</b> Daniel; cisco-voip@puck.nether.net<br>
<b>Subject:</b> Re: [cisco-voip] Recovering UCOS Passwords - Round 281</font>
<div> </div>
</div>
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span>Sure enough, this round goes to our friends in Boxborough. They're using the same algorithm as before, but now they're also encrypting the passphrase with RSA. Unless the RSA private key fairy brings me something for Christmas, this route will be closed
with updates. That truly would be a gift that keeps on giving! <span>😊</span><br>
</span>
<div><br>
</div>
<div>For labs, there may be a workaround. Try booting the UC host to a Linux CD and overwriting the following file with an older copy. Then it should spit out a traditional passphrase when you create the remote account.<br>
</div>
<div><br>
</div>
<div>/usr/local/platform/bin/remotesupport_createaccount<br>
</div>
<div><br>
</div>
<div>Would probably be easiest to pull it from the RPM on an ISO. This is the path on a 12.0.1.10000-10 disk.<br>
</div>
<span><br>
</span></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span>\Cisco\ucplatform\RPMS\platform-remotesupport-2.0.0.1-3.i386.rpm</span><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> cisco-voip <cisco-voip-bounces@puck.nether.net> on behalf of Pete Brown <jpb@chykn.com><br>
<b>Sent:</b> Thursday, December 6, 2018 9:00 PM<br>
<b>To:</b> Daniel; cisco-voip@puck.nether.net<br>
<b>Subject:</b> Re: [cisco-voip] Recovering UCOS Passwords - Round 281</font>
<div> </div>
</div>
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Interesting! Any documentation on that? I checked out the release notes for those versions and didn't come across anything pertaining to the remote support passphrase decode version. Then again, I wouldn't be surprised if they didn't put this specific one
in the notes.</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
If anyone comes across this, please let me know. If it's just an algorithm change, I imagine it would be Decode Version 4.</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Daniel <daniel@ohnesorge.me><br>
<b>Sent:</b> Thursday, December 6, 2018 4:32 PM<br>
<b>To:</b> Pete Brown; cisco-voip@puck.nether.net<br>
<b>Subject:</b> Re: [cisco-voip] Recovering UCOS Passwords - Round 281</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
Whatever method you are using to decode the passphrase will be obsolete in versions 10.5(2)su7, 11.5(1)su4 and 12.0(1)su2 (and above) as they are using a new method to decode the passphrase.<br>
</p>
<br>
<div class="x_x_x_moz-cite-prefix">On 6/12/18 5:33 am, Pete Brown wrote:<br>
</div>
<blockquote type="cite">
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I'm sure some of you noticed, but earlier this year Cisco started releasing patches to kill off the last sanctioned method of getting to platformConfig.xml. When you run "utils create report platform" on recent versions, it's no longer in the report. Someone
in Boxborough really knows how to put the "cus(s)" in "customers"!</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<a href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fquickview.cloudapps.cisco.com%2Fquickview%2Fbug%2FCSCvh62145&data=02%7C01%7C%7C3cd076d65d084cfec4cf08d65c5fdcc8%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636797964125048625&sdata=lAIgqqoqPBoqZHGDBQuHxqAXViV%2F1ZczIhsktuc%2BqDA%3D&reserved=0" originalsrc="https://quickview.cloudapps.cisco.com/quickview/bug/CSCvh62145" shash="X0YbWiOXS3e2QGBl0r6B27pKMuMweqJXdiAZ1dPsyPIpDeaM4dvpPjSENszHVT4vRKty+nYz3UjEFbZjDIjrQqJ82YvO5hfIXTL1aReSEXimF1BGlrbFQ4TUe7Xvn/ctmJlghMKR9RHX1Bcl/AwrSSor4Ve8fY0RU5V20xVbXdI=" id="LPNoLP753067">https://quickview.cloudapps.cisco.com/quickview/bug/CSCvh62145</a><br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I'm testing a new version of the UCOS Password Decrypter that acquires the file for you. To use this feature, you enable remote support on your UCOS host then plug in the UCOS host IP, remote support user and remote support passphrase. The app decodes the
passphrase, pulls the file via SSH and displays the passwords.</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Need a few volunteers to test before I update the tools page. If you're interested, let me know. Would post a temp link here but I don't want yet another dead link floating around.</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
-Pete<br>
</div>
<br>
<fieldset class="x_x_x_mimeAttachmentHeader"></fieldset> <br>
<pre>_______________________________________________
cisco-voip mailing list
<a class="x_x_x_moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>
<a class="x_x_x_moz-txt-link-freetext" href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C3cd076d65d084cfec4cf08d65c5fdcc8%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636797964125048625&sdata=eeLWvAmi1Ti3AF7PnY%2BrRbG%2FuSko9XDizgn5Guc3fsk%3D&reserved=0" originalsrc="https://puck.nether.net/mailman/listinfo/cisco-voip" shash="KZhAxvogcFZMK/syzsau6mh07rqmal14Gy3uE0dYBY9DRlqEimTj3lDx1RIEMsA1wnABvmFulMURV86OPpDipKMuEvg+6IXX8jKZf0wmYMl3SFyq6tsiPt8cI/Y39baQ6cIYcAjmEvTF21ZCmm46UKX6fx9NnzV4XoaYn3t3fE0=">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
</body>
</html>