Posts

copy-router-config Package Description

Copies configuration files from Cisco devices running SNMP. copy-router-config Homepage | Kali copy-router-config Repo Author: muts License: GPLv2 Tools included in the copy-router-config package copy-router-config.pl – Copies Cisco configs via SNMP root@kali:~# copy-router-config.pl ###################################################### # Copy Cisco Router config  - Using SNMP # Hacked up by muts - muts@offensive-security.com ####################################################### Usage : ./copy-copy-config.pl <router-ip> <tftp-serverip> <community> Make sure a TFTP server is set up, preferably running from /tmp ! [/toggle] [toggle title=”merge-router-config.pl – Merges Cisco configs via SNMP” variation=”deepblue”] root@kali:~# merge-router-config.pl ###################################################### # Merge Cisco Router config  - Using SNMP # Hacked up by muts - muts@offensive-security.com ###############################...

cisco-torch Package Description

Cisco Torch mass scanning, fingerprinting, and exploitation tool was written while working on the next edition of the “Hacking Exposed Cisco Networks”, since the tools available on the market could not meet our needs. The main feature that makes Cisco-torch different from similar tools is the extensive use of forking to launch multiple scanning processes on the background for maximum scanning efficiency. Also, it uses several methods of application layer fingerprinting simultaneously, if needed. We wanted something fast to discover remote Cisco hosts running Telnet, SSH, Web, NTP and SNMP services and launch dictionary attacks against the services discovered. Source: http://www.hackingciscoexposed.com/?link=tools cisco-torch Homepage | Kali cisco-torch Repo Author: Born by Arhont Team License: LGPL-2.1 Tools included in the cisco-torch package cisco-torch – Cisco device scanner root@kali:~# cisco-torch Using config file torch.conf... Loading include and plu...

cisco-ocs Package Description

A mass Cisco scanning tool. cisco-ocs Homepage | Kali cisco-ocs Repo Author: OverIP License: GPLv2 Tools included in the cisco-ocs package cisco-ocs – A mass Cisco scanning tool root@kali:~# cisco-ocs ********************************* OCS v 0.2 ********************************** ****                                                                      **** ****                           coded by OverIP                            **** ****                           overip@gmail.com                           **** ****     ...

cisco-global-exploiter Package Description

Cisco Global Exploiter (CGE), is an advanced, simple and fast security testing tool. cisco-global-exploiter Homepage | Kali cisco-global-exploiter Repo Author: Nemesis, E4m License: GPLv2 Tools included in the cisco-global-exploiter package cge.pl – Simple and fast security testing tool root@kali:~# cge.pl Usage : perl cge.pl <target> <vulnerability number> Vulnerabilities list : [1] - Cisco 677/678 Telnet Buffer Overflow Vulnerability [2] - Cisco IOS Router Denial of Service Vulnerability [3] - Cisco IOS HTTP Auth Vulnerability [4] - Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability [5] - Cisco Catalyst SSH Protocol Mismatch Denial of Service Vulnerability [6] - Cisco 675 Web Administration Denial of Service Vulnerability [7] - Cisco Catalyst 3500 XL Remote Arbitrary Command Vulnerability [8] - Cisco IOS Software HTTP Request Denial of Service Vulnerability [9] - Cisco 514 UDP Flood Denial of Service Vulnerability [10] ...

cisco-auditing-tool Package Description

Perl script which scans cisco routers for common vulnerabilities. cisco-auditing-tool Homepage | Kali cisco-auditing-tool Repo Author: g0ne License: GPLv2 Tools included in the cisco-auditing-tool package CAT – Scans cisco routers for common vulnerabilities root@kali:~# CAT Cisco Auditing Tool - g0ne [null0] Usage:     -h hostname (for scanning single hosts)     -f hostfile (for scanning multiple hosts)     -p port #   (default port is 23)     -w wordlist (wordlist for community name guessing)     -a passlist (wordlist for password guessing)     -i [ioshist]    (Check for IOS History bug)     -l logfile  (file to log to, default screen)     -q quiet mode   (no screen output) cisco-auditing-tool Usage Example Scan the host (-h 192.168.99.230) on port 23 (-p 23) , using a password dictionary file (-a /usr/share/wordlists/nmap.lst) : root@kali:~# CAT -...

BED

BED Package Description BED stands for Bruteforce Exploit Detector. It is designed to check daemons for potential buffer overflows, format strings et. al. Kali BED Repo Author: mjm, eric License: GPLv2 Tools included in the bed package bed – A network protocol fuzzer root@kali:~# bed  BED 0.5 by mjm ( www.codito.de ) & eric ( www.snake-basket.de )  Usage:  ./bed.pl -s <plugin> -t <target> -p <port> -o <timeout> [ depends on the plugin ]  <plugin>   = FTP/SMTP/POP/HTTP/IRC/IMAP/PJL/LPD/FINGER/SOCKS4/SOCKS5  <target>   = Host to check (default: localhost)  <port>     = Port to connect to (default: standard port)  <timeout>  = seconds to wait after each test (default: 2 seconds)  use "./bed.pl -s <plugin>" to obtain the parameters you need for the plugin.  Only -s is a mandatory switch. bed Usage Example Use the HTTP...

BBQSQL

BBQSQL Package Description Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don’t you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues. BBQSQL is a blind SQL injection framework written in Python. It is extremely useful when attacking tricky SQL injection vulnerabilities. BBQSQL is also a semi-automatic tool, allowing quite a bit of customization for those hard to trigger SQL injection findings. The tool is built to be database agnostic and is extremely versatile. It also has an intuitive UI to make setting up attacks much easier. Python gevent is also implemented, making BBQSQL extremely fast. Similar to other SQL injection tools you provide certain request information. Must provide the usual information: URL HTTP Method Headers Cookies Encoding methods Redirect behavior Files HTTP Auth Proxies Then specify where the injection ...