Mikrotik-router-hack

WinboxExploit Dies ist ein Proof of Concept der kritischen WinBox-Sicherheitslücke CVE-2018-14847, die das beliebige Lesen von Dateien mit Klartext-Passwörtern ermöglicht. Die Sicherheitslücke wurde bereits vor langer Zeit behoben, daher ist dieses Projekt beendet und wird nicht mehr unterstützt...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Ferramentas de Pentest — /rede Repositório de scripts para auditoria e testes de penetração em redes. Use apenas em dispositivos com autorização formal. CVE-2018-14847 — MikroTik Winbox Credential Extractor Descrição Exploita a vulnerabilidade de leitura de arquivo não autenticada no serviço Winb...

MikroTik-Winbox-Scanner

Winbox प्रोटोकॉल स्कैनर MikroTik RouterOS इंटरनेट पर एक्सपोज़्ड MikroTik Winbox सेवाओं का पता लगाने के लिए डिज़ाइन किया गया एक उच्च-प्रदर्शन समवर्ती स्कैनर। यह टूल TCP पोर्ट 8291 पर सक्रिय Winbox एंडपॉइंट्स की पहचान करता है और सेवा उपलब्धता निर्धारित करने के लिए RouterOS प्रतिक्रिया व्यवहार को...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept der Mikrotik-Sicherheitslücke CVE-2018-14847 hauptsächlich auf Winbox, liest direkt das Passwort vom RouterOS auf dem Standardport 8291. Original von: https://github.com/BigNerd95/ Voraussetzungen Python 3+ Installation auf Linux root@kitploit: apt...

MikroRoot

MikroRoot Automatisierte Version von CVE-2018-14847. Es durchsucht Shodan nach verwundbaren Hosts und versucht dann, sie auszunutzen. Verwendung Beachten Sie, dass dieses Skript NICHT mit Python2.x läuft. Verwenden Sie nur Python 3+. MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User...

mikrotik-beast

Mikrotik Beast tool Ferramenta de exploração em massa do MikroTik WinBox, CVE-2018-14847 Esta ferramenta permite escanear um intervalo de hosts de rede CIDR contra o exploit winbox CVE-2018-14847. Uso $ python3 mikrotikbeast.py Exemplos de entrada aceitos Exemplo 1: '192.168.5.0/24' Exemplo 2:...

WinboxExploit

WinboxExploit Implementação em C do BasuCert/WinboxPoC Vulnerabilidade Crítica do Winbox CVE-2018-14847 Apenas reimplementei uma solução de https://github.com/BasuCert/WinboxPoC...

winboxPOC

WinboxExploit Ceci est une preuve de concept de la vulnérabilité critique WinBox CVE-2018-14847 qui permet la lecture arbitraire de fichiers contenant des mots de passe en texte clair. Prérequis Python 3+ Ce script ne fonctionnera PAS avec Python 2.x ou version inférieure. Comment utiliser Le...

CVE-2018-14847

CVE-2018-14847 Erstelle einen globalen Proxy basierend auf RouterOS via CVE-2018-14847 Wie man es verwendet Vorbereitung root@kitploit: pip3 install paramiko ipcalc optparse hashlib Verwendung für IP-Liste root@kitploit: python3 loop.py -f list.txt für einzelne IP root@kitploit: python3 loop.py i...

routeros-CVE-2018-14847-bytheway

By the Way By the Way ist ein Exploit, der eine Root-Shell auf Mikrotik-Geräten mit folgenden RouterOS-Versionen ermöglicht: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 Der Exploit nutzt die Path-Traversal-Schwachstelle CVE-2018-14847 aus, um das Admin-Passwort zu...

WinboxPoC

WinboxExploit Questa è una proof of concept della critica vulnerabilità WinBox CVE-2018-14847 che consente la lettura arbitraria di file con password in chiaro. La vulnerabilità è stata riparata da tempo, quindi questo progetto è terminato e non sarà più supportato o aggiornato. Puoi invece...

Exploit for Path Traversal in Mikrotik Routeros

By the Way By the Way is an exploit that enables a root shell...

Botnet of Thousands of MikroTik Routers Abused in Glupteba, TrickBot Campaigns

Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years. According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the...

TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

Microsoft on Wednesday detailed a previously undiscovered technique put to use by the TrickBot malware that involves using compromised Internet of Things IoT devices as a go-between for establishing communications with the command-and-control C2 servers. "By using MikroTik routers as proxy server...

Exploit for Path Traversal in Mikrotik Routeros

This is a proof of concept PoC exploit for the critical WinBox vulnerability CVE-2018-14847 that allows for arbitrary file read of plain text passwords. The vulnerability has been fixed, but the project is no longer supported or updated. The exploit is written in Python and uses the socket librar...

Yandex Pummeled by Potent Meris DDoS Botnet

Technical details tied to a record-breaking distributed-denial-of-service DDoS attack against Russian internet behemoth Yandex are surfacing as the digital dust settles. A massive botnet, dubbed Mēris, is believed responsible, flooding Yandex with millions of HTTP requests for webpages at the sam...

Exploit for Path Traversal in Mikrotik Routeros

Mikrotik Login Exploit PoC Proof of Concept dari vulnerabili...

Huawei Router Flaw Leaks Default Credential Status

A vulnerability in some Huawei routers used for carrier ISP services allows cybercriminals to identify whether the devices have default credentials or not – without ever connecting to them. CVE-2018-7900 exists in the router panel and allows credentials information to leak – so attackers can simp...

Fake browser update seeks to compromise more MikroTik routers

This blog post was authored by @hasherezade and Jérôme Segura. MikroTik, a Latvian company that makes routers and ISP wireless systems, has been dealing with several vulnerabilities affecting its products' operating system over the past few months. Ever since a critical flaw in RouterOS was...

Mikrotik RouterOS Remote Root

/ Exploit Title: RouterOS Remote Rooting Date: 10/07/2018 Exploit Author: Jacob Baines Vendor Homepage: www.mikrotik.com Software Link: https://mikrotik.com/download Version: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42 Beta: 6.29rc1 - 6.43rc3 Tested on: RouterOS Various CVE : CVE-2018-14847 By...