mirror of
https://github.com/carlospolop/hacktricks
synced 2025-03-02 14:27:12 +00:00
86 lines
4.7 KiB
Markdown
86 lines
4.7 KiB
Markdown
# EIGRP Attacks
|
||
|
||
<details>
|
||
|
||
<summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary>
|
||
|
||
Other ways to support HackTricks:
|
||
|
||
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
|
||
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
|
||
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
|
||
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks_live**](https://twitter.com/hacktricks_live)**.**
|
||
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
||
|
||
</details>
|
||
|
||
**This is a summary of the attacks exposed in** [**https://medium.com/@in9uz/cisco-nightmare-pentesting-cisco-networks-like-a-devil-f4032eb437b9**](https://medium.com/@in9uz/cisco-nightmare-pentesting-cisco-networks-like-a-devil-f4032eb437b9). Check it for further information.
|
||
|
||
## **Fake EIGRP Neighbors Attack**
|
||
|
||
- **Objective**: To overload router CPUs by flooding them with EIGRP hello packets, potentially leading to a Denial of Service (DoS) attack.
|
||
- **Tool**: **helloflooding.py** script.
|
||
- **Execution**:
|
||
%%%bash
|
||
~$ sudo python3 helloflooding.py --interface eth0 --as 1 --subnet 10.10.100.0/24
|
||
%%%
|
||
- **Parameters**:
|
||
- `--interface`: Specifies the network interface, e.g., `eth0`.
|
||
- `--as`: Defines the EIGRP autonomous system number, e.g., `1`.
|
||
- `--subnet`: Sets the subnet location, e.g., `10.10.100.0/24`.
|
||
|
||
## **EIGRP Blackhole Attack**
|
||
|
||
- **Objective**: To disrupt network traffic flow by injecting a false route, leading to a blackhole where the traffic is directed to a non-existent destination.
|
||
- **Tool**: **routeinject.py** script.
|
||
- **Execution**:
|
||
%%%bash
|
||
~$ sudo python3 routeinject.py --interface eth0 --as 1 --src 10.10.100.50 --dst 172.16.100.140 --prefix 32
|
||
%%%
|
||
- **Parameters**:
|
||
- `--interface`: Specifies the attacker’s system interface.
|
||
- `--as`: Defines the EIGRP AS number.
|
||
- `--src`: Sets the attacker’s IP address.
|
||
- `--dst`: Sets the target subnet IP.
|
||
- `--prefix`: Defines the mask of the target subnet IP.
|
||
|
||
## **Abusing K-Values Attack**
|
||
|
||
- **Objective**: To create continuous disruptions and reconnections within the EIGRP domain by injecting altered K-values, effectively resulting in a DoS attack.
|
||
- **Tool**: **relationshipnightmare.py** script.
|
||
- **Execution**:
|
||
%%%bash
|
||
~$ sudo python3 relationshipnightmare.py --interface eth0 --as 1 --src 10.10.100.100
|
||
%%%
|
||
- **Parameters**:
|
||
- `--interface`: Specifies the network interface.
|
||
- `--as`: Defines the EIGRP AS number.
|
||
- `--src`: Sets the IP Address of a legitimate router.
|
||
|
||
## **Routing Table Overflow Attack**
|
||
|
||
- **Objective**: To strain the router's CPU and RAM by flooding the routing table with numerous false routes.
|
||
- **Tool**: **routingtableoverflow.py** script.
|
||
- **Execution**:
|
||
%%%bash
|
||
sudo python3 routingtableoverflow.py --interface eth0 --as 1 --src 10.10.100.50
|
||
%%%
|
||
- **Parameters**:
|
||
- `--interface`: Specifies the network interface.
|
||
- `--as`: Defines the EIGRP AS number.
|
||
- `--src`: Sets the attacker’s IP address.
|
||
|
||
|
||
<details>
|
||
|
||
<summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary>
|
||
|
||
Other ways to support HackTricks:
|
||
|
||
* If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!
|
||
* Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
|
||
* Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family)
|
||
* **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks_live**](https://twitter.com/hacktricks_live)**.**
|
||
* **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
|
||
|
||
</details>
|