Offensive security assessments
Auditing Network Devices Using Nipper
Nipper (Network Infrastructure Parser) is a powerful open-source tool (also available as a commercial product via Titania) used for auditing the configurations of network devices like:
Why it matters
Nipper is especially useful when: - You're conducting a configuration review for network devices. - The client provides you configuration backups from routers, firewalls, or switches. - You want to check for firewall rule issues , unencrypted services , weak authentication , and more.
How we test it
Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.
Testing approach
- Firewalls (e.g., Cisco ASA, Juniper)
- Routers & Switches (e.g., Cisco IOS, Nexus)
- Security appliances
- Input : You provide Nipper with a configuration file (e.g., from a Cisco device)
- Analysis : Nipper parses the config and identifies security weaknesses
- Output : It generates a detailed HTML, PDF, or TXT report with prioritized findings and remediation guidance.
- Cisco IOS / IOS-XE / NX-OS / ASA
- Juniper ScreenOS / JunOS
What we look for
- Firewalls (e.g., Cisco ASA, Juniper)
- Routers & Switches (e.g., Cisco IOS, Nexus)
- Security appliances
- Input : You provide Nipper with a configuration file (e.g., from a Cisco device)
- Analysis : Nipper parses the config and identifies security weaknesses
- Output : It generates a detailed HTML, PDF, or TXT report with prioritized findings and remediation guidance.
- Cisco IOS / IOS-XE / NX-OS / ASA
- Juniper ScreenOS / JunOS