C++ source code.

The Cisco VPN Client uses weak encryption to store user and group passwords in your local profile file.

I coded a little tool to reveal the saved passwords from a given profile file.

The Cisco Password Revealer along with the source code can be downloaded here.

Thx to the Crypto++ Project.



The main problem of the method used to encrypt the passwords is, that the whole procedure is deterministically and no user input is used. This effectively means that the encryption keys the Cisco Client calculates can also be calculated by any other program whensoever this program knows the algorithm. This algorithm has now been reverse engineered.-C++ source code.

The Cisco VPN Client uses weak encryption to store user and group passwords in your local profile file.

I coded a little tool to reveal the saved passwords from a given profile file.

The Cisco Password Revealer along with the source code can be downloaded here.

Thx to the Crypto++ Project.



The main problem of the method used to encrypt the passwords is, that the whole procedure is deterministically and no user input is used. This effectively means that the encryption keys the Cisco Client calculates can also be calculated by any other program whensoever this program knows the algorithm. This algorithm has now been reverse engineered.