lololosys / awesome_cisco_exploitation

A curated list of awesome Cisco exploitation resources

A curated list of awesome Cisco exploitation resources. Inspired by awesome.

A curated list of awesome Cisco exploitation resources

• Awesome Cisco Exploiation
  • Exploitation
  • Shellcoding
  • Malwares and implents
  • Code
  • Remediation

Exploitation

• Cisco IOS Router Exploitation - A map of the problem space - by Felix 'FX' Lindner [July 26, 2009]
• Research on Cisco IOS Security Mechanisms - by Xiaoyan Sua,Dongying Wua, Da Xiaoa, Yuxiang Hana [2011]
• Burning the bridge: Cisco IOS exploits - by FX of Phenoelit [2002]
• IOS Exploitation Techniques - by Gyan Chawdhary []
• BENIGNCERTAIN - Extracting VPN private keys from Cisco PIX
• EXTRABACON - Authentication Bypass in Cisco ASA
• Cisco ASA: IKEv1 heap overflow - CVE-2016-1287 - Presentation
• Cisco ASA: IKEv1 heap overflow - CVE-2016-1287 - Writeup

Shellcoding

• Killing the Myth of Cisco IOS Diversity - Recent Advances in Reliable Shellcode Design - by Ang Cui,Jatin Kataria,Salvatore J. Stolfo []
• Cisco IOS Shellcodes - by Gyan Chawdhary,Varun Uppal [2008]

Malwares

• SYNful Knock - A Cisco router implant [2015]
• JetPlow NSA implent

Code

• IOS 11.2-8 Leaked Source Code

Remediation

• Synful Knock Scanner