Cisco - Show Commands for Compromised Router


Once your Cisco router is compromised, "don't use any configuration command"!

Instead use the following show commands to gather information about your router and record everything.

show clock detail
show version
show run
show start
show reload
show ip route
show ip arp
show users
show logging
show ip interface
show interfaces
show tcp brief all
show ip sockets
show ip nat translations
show ip cache flow
show ip cef
show snmp user
show snmp group

No comments: