<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing Network Device Hardening — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-network-device-hardening.

## Tools

### `nmap`

Service enumeration and security verification

**Usage:**
```bash
nmap -sV -p 22,23,80,161,443 <device_ip>
```

**Key Flags:**
  - `-sV: service version detection`
  - `-sU: UDP scan`
  - `--script snmp-brute: SNMP testing`
  - `--script http-methods: HTTP audit`

---

### `diff`

Configuration comparison

**Usage:**
```bash
diff --unified baseline.conf current.conf
```

**Key Flags:**
  - `--unified: unified diff format`
  - `-y: side-by-side`
  - `--color: colorized output`

---

### `scp`

Secure configuration backup

**Usage:**
```bash
scp admin@device:running-config /backups/
```

**Key Flags:**
  - `-P: port`
  - `-i: identity file`

---

## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
