This tool is designed to analyze the configuration files of Cisco devices.
The list of checks is based on the Cisco Guide to Harden Cisco IOS Devices.
pip3 install -r requirements.txt
The simplest way to use:
python3 ccat.py configuration_file
Windows:
ccat.exe configuration_file<config_directory>- path to the configuration file or directory with configuration files-vlanmap <path_to_file>- path to vlanmap file-output <result_html_files_directory>- path to output HTML files directory--storm_level- the appropriate level for storm-control (by default value = 80)--max_number_mac- maximum number of mac-addresses for port-security (by default value = 10)--disabled-interfaces- check interfaces even if they are turned off--no-console-display- output analysis results in HTML files directory or into network graph--dump-creds- dump usernames, passwords and hashes from configs--graph- builds a network map of VLANs (you may leave the argument empty to get into interactive mode or define a file name for graph output in png extension)
Extended options example:
python3 ccat.py ./configs -output ./out -vlanmap vlmap.txt \
--storm_level 40.0 \
--max_number_mac 100 \
--disabled-interfaces \
--no-console-display \
--graph network_map