Re: Pentest Cisco

[Edin Dizdarevic <SecurityFocus () truesec de>]

Some choice can be found here:

http://backtrack.offensive-security.com/index.php/Tools
http://www.packetstormsecurity.org/cisco/index3.html
http://securitytools.wikidot.com/cisco-specific

Yersinia is also great...

Regards,
Edin



Paulo Ribeiro schrieb:
> Hello All,
>
> I need to respond to an RFP to audit an infrastructure with 100+ cisco devices (routers, switches, etc...)
> I was wondering if some of you would share:
>
> 1) what to ask to size the pentest? number of devicee? role? number of VLAN (any relevance?)
> 2) how would you go to pentest it? any particular tools?
>  
> Would you use CDP and/or SNMP? (any tools) ? would one first start by doing a network scan to identify where and what the devices are?
>
> Any help appreciated!
>
> Kind regards,
> LoPo
>
>
>
>       
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 
>
> http://www.iacertification.org
> ------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------