Here is the first book to focus solely on Cisco network hacking, security auditing, and defense issues. Using the proven Hacking Exposed methodology, this book shows you how to locate and patch system vulnerabilities by looking at your Cisco network through the eyes of a hacker. The book covers device-specific and network-centered attacks and defenses and offers real-world case studies.

Table of Contents

Part I: Foundations

Case Study: eBay Surprise

1 Cisco Network Design Models and Security Overview

2 Cisco Network Security Elements

3 Real-World Cisco Security Issues

Part Il: "I Am Enabled": Hacking the Box

Case Study: The One with a Nessus Report

4 Profiling and Enumerating Cisco Networks

5 Enumerating and Fingerprinting Cisco Devices

6 Getting In from the Outside: Dead Easy

7 Hacking Cisco Devices: The Intermediate Path

8 Cisco IOS Exploitation: The Proper Way

9 Cracking Secret Keys, Social Engineering, and Malicious Physical Access

10 Exploiting and Preserving Access

11 Denial of Service Attacks Against Cisco Devices

Part Ill: Protocol Exploitation in Cisco Networking Environments

Case Study: The Flying OSPF Hell

12 Spanning Tree, VLANs, EAP-LEAP, and CDP

13 HSRP, GRE, Firewalls, and VPN Penetration

14 Routing Protocols Exploitation

Part IV: Appendixes

Case Study: The Epic Battle

A: Network Appliance Security Testing Template

B: Lab Router Interactive Cisco Auto Secure Configuration Example

C: Undocumented Cisco Commands

About the Authors

Dr. Andrew A. Vladimirov, CCNP, CCDP, CISSP, CWNA, TIA Linux+, is a co-founder of Arhont Ltd., an international IT security consultancy.

Konstantin V. Gavrilenko, co-founder of Arhont Ltd., has extensive experience working with Cisco PIX firewalls and Cisco VPN concentrators.

Janis N. Vizulus is a researcher and programmer specializing in digital forensics and penetration testing.

Andrei A. Mikhailovsky, co-founder of Arhont Ltd., is an expert in network security and penetration testing