Wednesday, April 27, 2011

Cisco ASA bypass and play around

You can play new configuration without touching existing configurations.



#asdm image flash:/asdm-602.bin
#http server enable
pixfirewall(config)# http 192.168.10.0 255.255.255.0 inside


***if you want to play with already configured ASA. You don't need to touch inside configuration..

Boot ASA
Presss ESC ...at boot
rommon #1> confreg

Use ? for help.
rommon #0> confreg

Current Configuration Register: 0x00000001
Configuration Summary:
boot default image from Flash

Do you wish to change this configuration? y/n [n]: y <----
enable boot to ROMMON prompt? y/n [n]: n
enable TFTP netboot? y/n [n]: n
enable Flash boot? y/n [n]: n
select specific Flash image index? y/n [n]: n
disable system configuration? y/n [n]: y
go to ROMMON prompt if netboot fails? y/n [n]: n
enable passing NVRAM file specs in auto-boot mode? y/n [n]: n
disable display of BREAK or ESC key prompt during auto-boot? y/n [n]: n

Current Configuration Register: 0x00000040
Configuration Summary:
boot ROMMON
ignore system configuration

Update Config Register (0x40) in NVRAM...

rommon #1> en
Invalid or incorrect command. Use 'help' for help.
rommon #0>
rommon #0>
rommon #0> boot
Launching BootLoader...
Default configuration file contains 1 entry.

Searching / for images to boot.

Loading /asa802-k8.bin... Booting...


You can play whatever you want ...........................

if you play enoguht
ciscoasa(config)# config-register 0x1
ciscoasa#reboot

Don't save or don't write mem

No comments: