used to gather information about configuration as well as system status. The older
version of SNMP uses a community string for authentication,
which is provided in
clear text because the first version of SNMP doesn’t use encryption.
CAT
uses a word
list of potential community strings, though it was common for the read-only commu‐
nity
string to be
public
and the read-write community string to be
private
for a long
time. They were
the defaults in many cases, and unless the configuration of the sys‐
tem was changed, that’s what you would need to supply.
CAT
is an easy program to run. It’s a Perl script that calls individual modules for
SNMP and brute-force runs. As I’ve noted, it does require you to provide the hosts.
You can provide a single host or a text file with a list of hosts in it.
Example 4-6
shows
the
help output for
CAT
and how to run it against Cisco devices.
Example 4-6. CAT output
root@rosebud:~# CAT
Cisco Auditing Tool - g0ne
[
null0
]
Usage:
-h hostname
(
