killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage root@kitploit: $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

firecall

firecall Automatiza la comunicación SSH con firewalls, switches, etc. Descripción Estos scripts están diseñados para automatizar el envío de comandos a un firewall Cisco ASA. El propósito aquí es eliminar la necesidad de iniciar sesión manualmente en un firewall para realizar cambios. Este código...

CVE-2020-3452_auto

Enum Cisco ASA via CVE-2020-3452 and download files root@kitploit: python enum.py target Convert Lua byte code using unluac root@kitploit: bash convert.sh...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the...

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...

CISCO-CVE-2020-3452-Scanner-Exploiter

Escáner y explotador de CISCO CVE-2020-3452 Escaneará los servidores objetivo desde shodan y luego encontrará los servidores vulnerables a CVE-2020-3452 lectura remota no autorizada de archivos en Cisco Adaptive Security Appliance y FTD. Acerca de Una vulnerabilidad en la interfaz de servicios we...

libdlmalloc

libdlmalloc libdlmalloc is a python script designed for use with GDB that can be used to analyse the Doug Lea's allocator, aka dlmalloc. It currently supports dlmalloc 2.8.x versions. Note that some parts can also be used independently GDB, for instance to do offline analysis of some snapshotted...

Cisco-ASA-FTD-Web-Services-Traversal

Vulnerabilidad de Recorrido de Directorios en los Servicios Web del Software Cisco Adaptive Security Appliance y Firepower Threat Defense CVE-2020-3452 Uso: CVE-2020-3452.py https://target Descripción de la vulnerabilidad: Una vulnerabilidad en la interfaz de servicios web del software Cisco...

CVE-2020-3452

CVE-2020-3452 Un script de Python WIP para explotar la vulnerabilidad de traversal de directorios en las interfaces web de Cisco Adaptive Security Appliance ASA y Cisco Firepower Threat Defense FTD. Tenga en cuenta que se crearán directorios para los objetivos especificados y cualquier archivo...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...

cve-2020-3452

CVE-2020-3452-Exploit For Educational Purpose ONLY! Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - Local File Inclusion Vuln Test sciript Usage root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP default : 80/tcp python Cisco Adaptive Security Appliance Software...

CVE-2022-20866

Comprobador de Claves RSA para CVE-2022-20866 Una vulnerabilidad en el manejo de claves RSA en dispositivos que ejecutan el software Cisco Adaptive Security Appliance y el software Cisco Firepower Threat Defense podría permitir que un atacante remoto no autenticado recupere la clave privada RSA...

CVE-2020-3580

CVE-2020-3580 XSS reflejado en Cisco ASA / FTD en el endpoint WebVPN SAML SP ACS /+CSCOE+/saml/sp/acs. Parcheado en cisco-sa-asaftd-xss-multiple-FCB3vPZe. Este repositorio contiene: xss.html — un PoC verificable por humanos para objetivos autorizados. src/ — un pipeline de descubrimiento y...

CVE-2016-6366

CVE-2016-6366 Repositorio público de mejoras para el exploit EXTRABACON, una ejecución remota de código para Cisco ASA escrito por Equation Group NSA y filtrado por Shadow Brokers. Hay shellcode mejorado, un script para encontrar offsets de LINA, un módulo de Metasploit y extrabacon-2.0. Estamos...

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt fi...

ciscoasa_honeypot

Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Un escáner Python seguro y no destructivo para bypass de autenticación WebVPN en Cisco ASA / FTD CVE-2025-20362. CVE-2025-20362 permite a atacantes no autenticados eludir la autenticación y acceder a recursos WebVPN restringidos mediante fallos de path traversal /...