This value is necessary to complete the authentication process. One of these cookie values has the name DSID. The passcode seen below is your pin and current two factor token value concatenated in that order.Īfter successfully authenticating to the web interface, your browser will have multiple cookies set for the Juniper site. Your pin is set up when you first access the VPN web interface. Log in using your user account, pin, and token value. Now that all of the prerequisites have been met, we’ll log into the Juniper Web Interface. For this purpose, I just used Cookies Manager+ which I keep installed for web application penetration test engagements. Once it is there, we will grab the value and pass it to OpenConnect on the command line in order to complete authentication. This will place the DSID session cookie into your browser cookie storage. To prepare for building your SSL Tunnel you’ll need to log onto the VPN web interface. You won’t find this information or evidence of the switch in the man page or help for OpenConnect. Documentation for this switch is available at the following URL: Starting with v7.05, the OpenConnect client has the –jupiter switch included which provides “experimental” connectivity to Juniper VPN devices. In order to make this work, you have to be running OpenConnect v7.05 or later. The process is outlined below.įirst, install OpenConnect using your favorite package manager. Since, I was only connecting to this device on a temporary basis I just bypassed the Grease Monkey script and used a simple substitution. In the end, I found the following post the most useful for successfully connecting. However, many were somewhat complex and had a time investment requirement that just didn’t make sense for my temporary access requirement. I did a fair amount of searching and found several solutions to the problem. Since I didn’t have an OSX system I would have been forced to give up several tools that are extremely useful. The Juniper Pulse and Pulse Secure clients are only available for Windows and OSX.
One small problem, Juniper does not formally support Linux operating systems.
On a recent internal penetration test engagement, I was faced with using a Juniper VPN to access the target network.
0 kommentar(er)
