https://github.com/frostbits-security/ccat
Cisco Config Analysis Tool
https://github.com/frostbits-security/ccat
cisco-device defense network
Last synced: 7 months ago
JSON representation
Cisco Config Analysis Tool
- Host: GitHub
- URL: https://github.com/frostbits-security/ccat
- Owner: frostbits-security
- License: gpl-3.0
- Created: 2018-07-31T13:34:39.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2023-04-23T13:08:10.000Z (over 2 years ago)
- Last Synced: 2024-08-11T17:10:11.027Z (about 1 year ago)
- Topics: cisco-device, defense, network
- Language: Python
- Size: 781 KB
- Stars: 437
- Watchers: 33
- Forks: 98
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
Cisco Config Analysis Tool
[](http://www.toolswatch.org/2018/09/black-hat-arsenal-europe-2018-lineup-announced/)
This tool is designed to analyze the configuration files of Cisco devices. The [list of checks](https://github.com/cisco-config-analysis-tool/ccat/wiki/List-of-the-checks) is based on the [Cisco Guide to Harden Cisco IOS Devices](https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html).
## Installation
`pip3 install -r requirements.txt`
## Usage
The simplest way to use:
`python3 ccat.py configuration_file`
Windows:
`ccat.exe configuration_file`
Extended options:
`python3 ccat.py config_directory -vlanmap vlmap.txt -output result_html_files_directory --storm_level 40.0 --max_number_mac 100 --disabled-interfaces --no-console-display --graph network_map`
**configs** - path to the configuration file or directory with configuration files
**-vlanmap** - path to [vlanmap file](https://github.com/cisco-config-analysis-tool/ccat/wiki/Vlanmap-file)
**-output** - path to output html files directory
**--storm_level** - appropriate level for storm-control (by default value = 80)
**--max_number_mac** - maximum number of mac-addresses for port-security (by default value = 10)
**--disabled-interfaces** - check interfaces even if they are turned off
**--no-console-display** - output analysis results in html files directory or into network graph
**--dump-creds** - dump usernames, passwords and hashes from configs
**--graph** - builds network map of VLANs (you may left the argument empty to get into interactive mode or define a file name for graph output in png extension)