Skip to content

Enable and User Password with Secret

ID: enable-secret-for-user-and-password

Severity: info

Author: pussycat0x

Tags: file,audit,cisco,config-audit,cisco-switch,router

To configure the system to time-stamp debugging or logging messages, use one of the service timestamps global configuration commands. Use the no form of this command to disable this service.

id: enable-secret-for-user-and-password
info:
name: Enable and User Password with Secret
author: pussycat0x
severity: info
description: |
To configure the system to time-stamp debugging or logging messages, use one of the service timestamps global configuration commands. Use the no form of this command to disable this service.
reference:
- https://www.cisco.com/E-Learning/bulk/public/tac/cim/cib/using_cisco_ios_software/cmdrefs/service_timestamps.htm
tags: file,audit,cisco,config-audit,cisco-switch,router
file:
- extensions:
- conf
matchers-condition: and
matchers:
- type: word
words:
- "enable secret"
negative: true
- type: word
words:
- "configure terminal"
# digest: 4a0a0047304502207bdff44a4e566a9b4e48e4284368ffeeda45de97eaa0c0206b686f007d41c402022100bb5b9d81c4437964c123e59865b8ad8d9e4c006406b226df3cf14d513e543eee:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "file/audit/cisco/enable-secret-for-user-and-password.yaml"

View on Github