System Network Configuration Discovery

Adversaries may inspect network configuration on systems they access, including local interface IP and MAC addresses, address-resolution caches, routing tables, DNS resolver settings, and network-device or hypervisor configuration. Host-local commands read local configuration or cached state. Remote ESXi and network-device queries require an authorized management session. A network-device CLI variant is usable without an internal endpoint foothold when its SSH management endpoint is reachable from the Internet and accepts authorized credentials. Listed addresses, routes, and cache entries are observations of configuration or cached state, not proof that a peer is currently reachable.