Breaking News

Saturday 21 May 2022

Cisco IOS Router Exploitation - Arbitrary Services using TCL

 An increasing number of deployed IOS images support scripting from the command line by using TCL scripts. This feature is mostly used to automate monitoring of the device or automatically act upon certain log messages encountered.



However, it has been shown8 that TCL scripts can be used for implementing more complex services, including implementation of Botnet clients or making the router participate in the Twitter service.

As the number of TCL controllable functionality in Cisco IOS increases, attackers may well find everything they need for the purpose of “regular” online crime and fraud by using customized TCL scripts for IOS.

0 comments:

Post a Comment

'; (function() { var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true; dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq); })();
'; (function() { var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true; dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq); })();