Cisco Type 7 Passwords

The built in ‘cracker’ isn’t working at the moment but the process still stands. There are plenty of other sites/tools that can decrypt this type of password.

  • Hash Recovery Instructions
    1. Connect the console cable, power on the router and hit break a few times to enter monitor mode
    2. At the rommon prompt type confreg 0x2142 and hit enter
    3. Type i and hit enter to restart the router.
    4. When it has started up type enable to enter privileged mode
    5. Type copy start run and hit enter
    6. Type show run and look for an entry like this password 7 0235105A19005E3244
    7. Put the long number string into the top box on this page (ignore password 7)
    8. Hit Crack Password and marvel in your newly recovered password
    9. Go back to the router and type conf t to switch to global configuration mode
    10. Type config-register 0x2102 and hit enter
    11. Press Ctrl-Z and type reload then hit enter and your done.
  • Type 5 Passwords

    Don’t be fooled type 5 passwords can be cracked, it just takes a bit longer. You may have noticed an entry in your config that looked like this enable secret 5 $1$uWd7$maP6Byq6ETXegoZXG8vbZ0. This is a type 5 password.

  • Type 5 Recovery Instructions
    1. Get a copy of John the Ripper
    2. Create a text file with your hash in it, in the following format enable_secret_5:$1$uWd7$maP6Byq6ETXegoZXG8vbZ0
    3. Save the text file as pass.txt
    4. Assuming pass.txt is in the same folder as John type john-mmx.exe -inc:all pass.txt
    5. After a while depending on the length of the password you will/should be presented with the passwords.
  • Obviously that’s how to do it in Windows but the Linux version is very similar.

    Note: If you recognise the type 7 password from above then one of your old routers now belongs to me. Change your passwords because you’ve been owned.

    Bubble Etch Tank

    PCB bubble etch tank.


    This project started out because of a need to etch circuit boards and a lack of success doing it the cheap ‘etchant in a tray’ method.

    Heated bubble etch tanks were well over my budget and at five liters were also too large. As always eBay came to the rescue by providing three A4 (210 x 297) 6mm sheets of perspex and a 150 watt aquarium heater.

    150 watt heater
    3x A4 6mm Perspex

    As you can see I divided up one sheet of perspex in to three sections. Two, two inch pieces for the sides of the tank and the remainder for the base. I used a hand held jigsaw to make the cuts, the secret is to use a very fine blade with lots of teeth and when cutting go slow and steady, don’t try to push to much.

    High TPI

    Now the messy part starts. Glue the sides all together making sure every things clean and free of burrs first. I initially used normal silicone bathroom sealant but it wouldn’t hold the panels together (probably to smooth) so I had to clean everything up and start again. In the end I used aquarium sealant / glue, used for making fish tanks. Then clamp it all together (you might getaway with elastic bands) and leave it overnight to dry.

    Glue - probably should have done the washing up as well

    The etchant I use is sodium persulphate which works best when heated to between 40 to 50°C which is where the aquarium heater comes in. I had to modify the heater to reach the fish killing temperature needed as it only went up to about 35°. That was as simple as pulling of the temperature selector knob, unscrewing the holder underneath it and cutting off the plastic stop. I picked up a cheap aquarium thermometer (notice a theme here) that handily goes up to 50° so that I could fine tune the temperature.

    Now to the bubbly part. I already had an aquarium air pump so I ran a length of pipe (I used medical oxygen hose as it’s a. what I had to hand and 2. allows the hose to be bent without blocking the flow.) to a piece of rigid plastic pipe. I used a hot needle to pierce holes in the pipe and held it down with some suction cups.


    If you’re following along at home now is the time to fill it with water and give it a test run. For some reason after a while the bubbles were only coming out of half the pipe, but it’s still enough to keep the etchant moving around so it still does it’s job. (and anyway it was getting late and I was in a rush to etch a board) This is also a good time to adjust the heater to the required range.


    Fill with etchant and your done! The capacity is approximately two and a half liters so I had to use five 100g packs of sodium persulphate.

    Of coarse if you actually want to be able to use it, you’ll need some way of hanging the board in the etchant. As I only needed to etch a small board I put a couple of plastic cable ties on to a bamboo skewer and bent the bottoms up with the aid of a little heat.

    PCB hanger
    PCB hanger

    And that’s all there is to it.



    Don’t design and make all of this late at night because you’ll forget about silly little things like a lid. Sod it, cling film will do.


    Google Reader Unread Feed

    After an intense google-fu workout session ending in failure I may be the only person in the word interested in doing this but here goes…

    Use Google Reader? Want an RSS feed of only unread item? Then hears how!

    The secret is subtraction, you need to take your reading-list feed and remove all items with a read tag.

    As an example here’s what the reading-list and read feed url’s should look like

    Too find out your user ID go to and then enter this line of javascript into the address bar
    javascript:prompt("User ID", _USER_ID);void(0); you should then get a popup with your ID

    So to get the unread feed you put it all together like this

    So now I’ve got the Vista RSS Feed gadget (running on XP just to be awkward) displaying a list of my unread items.