CVE-2020-3452

このリポジトリには README がありません。...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - ローカルファイルインクルージョン脆弱性テストスクリプト 使い方 root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP デフォルト : 80/tcp python Cisco Adaptive Security Appliance Software 9.11 - Local Fi...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker простой bash-скрипт для проверки Cisco CVE-2020-3452 Требования: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Отказ от ответственности: Скрипт предназначен только для анализа безопасности и исследований, поэтом...

CVE-2020-3452-PoC

CVE-2020-3452 안녕하세요, 여러분. 이것은 nmap NSE 스크립트를 다운로드하여 NSE 모듈 파일에 넣고 원하는 호스트로 nmap 명령을 실행하는 간단한 스크립트입니다. 호스트 목록을 list.txt 파일에 넣으세요 감사합니다...

CVE-2020-3452_auto

CVE-2020-3452를 통한 Cisco ASA 열거 및 파일 다운로드 root@kitploit: python enum.py target unluac을 사용한 Lua 바이트코드 변환 root@kitploit: bash convert.sh...

CVE-2020-3452

CVE-2020-3452 Неаутентифицированное чтение файлов в Cisco ASA и Cisco Firepower Saikat Karmakar | Ноя : 2021 Этот скрипт проверяет, уязвим ли заданный хост к CVE 2020-3452 Требования: root@kitploit: requests termcolor Использование: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage:...

CVE-2020-3452

CVE-2020-3452 TL;DR 이것은 CVE-2020-3452에 대한 익스플로잇입니다. 아직 완전히 완성되지 않았습니다. 합법적인 상황에서 사용하십시오. 문제가 생기면 당신의 책임입니다. 이게 뭐죠? 이것은 CVE-2020-3452의 원래 PoC를 개선하기 위한 빠르고 대충 만든 시도입니다. 현재 단계에서는 원본과 똑같은 작업을 수행하는 간단한 py 스크립트에 불과합니다. 면책 조항 본 소프트웨어는 "있는 그대로" 제공되며, 상품성, 특정 목적에의 적합성 및 비침해에 대한 묵시적 보증을 포함하여 단, 이에 한정되지 않음...

CVE-2020-3452

Значки Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать данный инструмент Установка через pip root@kitploit: pip install CVE-2020-3452 Запустите команду ниже для проверки CVE-2020-3452 -h Настройка 2. Мы...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Простой эксплойт, использующий уязвимость CVE-2020-3452 для перечисления стандартных файлов, доступных в веб-каталоге устройств CISCO ASA/FTD. Использование: По умолчанию используется список файлов, составленный на основе примеров вывода из CVE-2018-0296 в Metasploit Framewo...

Security Bulletin: IBM Transformation Extender Advanced v10.0.x is affected by a vulnerability in its dependencies

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to Unix File Parameter Alteration Vulnerability Details CVEID:CVE-2020-3452 DESCRIPTION: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow a remote...

U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA

i found out that https://█████████/ was vulnerable to CVE-2020-3452 The IP has a SSL certificate pointing to █████████ curl -kv https://██████████/ Output Server certificate: subject: C=US; ████.mil Impact Anyone can read any file present on the server. System Hosts ███ Affected Products and...

U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA

i found out that https://█████/ was vulnerable to CVE-2020-3452 The IP has a SSL certificate pointing to ██████████ curl -kv https://███████/ Output; Server certificate: ███ Impact Anyone can read any file present on the server. System Hosts █████ Affected Products and Versions CVE Numbers...

U.S. Dept Of Defense: [CVE-2020-3452] on ███████

The following subdomain is vulnerable to CVE-2020-3452, which is an unauthenticated file read in Cisco ASA & Cisco Firepower. URL: https://████/ Vulnerable URL: https://███/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ ██████████ Resources:...

U.S. Dept Of Defense: Path Traversal - [ CVE-2020-3452 ]

Hello, I would like to report Path Traversal issue CVE-2020-3452 was found on https://█████/. POC: https://█████████/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ Impact https://nvd.nist.gov/vuln/detail/CVE-2020-3452 System Hosts ███ Affected...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-20...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco Adaptive Security Appliance Software and Firepower Threa...

Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)

Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal 2 Date: 12 Dec 2020 Exploit Author: [email protected] Vendor Homepage: cisco.com Software Link: It’s against Hardware, specifically ASA’s and FTD’s Version: ASAs from version 9.6 to 9.14.1.10 and FTD’s versions 6.2.3 to...

Cisco ASA 9.14.1.10 / FTD 6.6.0.1 Path Traversal

Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal 2 Date: 12 Dec 2020 Exploit Author: [email protected] Vendor Homepage: cisco.com Software Link: It’s against Hardware, specifically ASA’s and FTD’s Version: ASAs from version 9.6 to 9.14.1.10 and FTD’s versions 6.2.3 to...

Cisco ASA and FTD 9.6.4.42 - Path Traversal

Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal Date: 2020-10-10 Exploit Author: 3ndG4me Vendor: www.cisco.com Product: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html CVE : CVE-2020-3452 TARGET=$1 CISCOKNOWNFILES="logo.gif httpauth.html userdialog.htm...

Cisco ASA / FTD 9.6.4.42 Path Traversal

Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal Date: 2020-10-10 Exploit Author: 3ndG4me Vendor: www.cisco.com Product: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html CVE : CVE-2020-3452 TARGET=$1 CISCOKNOWNFILES="logo.gif httpauth.html userdialog.htm...