6778 matches found
CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 Checkscript based on: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Including the updated where there is an Authorization header to check for the known implant. !! Upgraded to look for upgraded implant The script checks length of...
CVE-2023-20198-Scanner
Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scanner This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. This Python script checks for compromised Cisco IOS XE devices by making HTTP and HTTPS...
cisco-rce
CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...
cisco-SNMP-enumeration
Cisc0wn - Cisco SNMP Script Cisco SNMP enumeration, brute force, config downloader and password cracking script. Tested and designed to work against Cisco IOS Switches and Routers. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton ...
CVE-2023-20198-Checker
Cisco-IOS-EX-Scanner CVE-2023-20198 CVE-2023-20198 & 0Day Implant Scanner tested in a lab and works, YMMV Quick and dirty scanner to run checks if the host is vulnerable/been compromised using 0day in Cisco IOS XE. This tool is designed to scan a given target or a list of targets to determine...
CiscoIOSSNMPToolkit
CiscoIOSSNMPToolkit Cisco iOS SNMP Overflow Exploit Toolkit CVE-2017-6736 CVE-2018-0296? I have recently submodded CVE-2018-0296, which can be used in junction with this original exploit, can be used to do reconnaissance and see what is contained in the appliance beforehand...
qub-network-security-cve-2023-20198
π‘οΈ qub-network-security-cve-2023-20198 Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE π Queenβs University Belfast β CSC3064 Network Security Assessment π Assessment Overview This project involves analyzing PCAP files provided by Fox-IT to: Identify Indicators o...
Cisco-IOS-XE-CVE-2023-20198
Cisco-IOS-XE-CVE-2023-20198 Exploit PoC for CVE-2023-20198 Vulnerability information and exploit usage offered by smokeintheshell See references Endpoint, http content type and headers management have been modified from other existing POCs to work in situations in which other exploits fail...
CVE-2023-20198
CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...
Cisco-SNMP-Slap
OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...
TCLtools
TCL scripts for Cisco IOS penetration testing With TCLtools you can transform any Cisco IOS hardware into a pivoting station. It's easy to set up and use! Features TCLmap β Port scanner implementation nmap TCLproxy β Proxy server implementation TCLproxy TCLproxy is a tool for pivoting through Cis...
Cisco IOS XE WLC - Arbitrary File Upload
A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...
Cisco_CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 Checkscript based on: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Thanks to Atea Redteam for their work. Requires: Python3.7+ Python libs:...
PoC-Exploit-CVE-2024-20467
Exploit for Cisco IOS XE CVE-2024-20467 Vulnerability Overview This exploit targets a vulnerability in the IPv4 fragment assembly code found in Cisco IOS XE Software. The vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS condition on vulnerable devices...
cisco-cve-2023-20198-checker
Cisco CVE-2023-20198 Checker A professional vulnerability scanner for detecting CVE-2023-20198 in Cisco IOS XE devices. Tests for vulnerable SOAP/XML interfaces WSMA. Designed for authorized security assessments and network auditing. β οΈ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING ONLY This...
CVE-2023-20198-Exploit
Cisco IOS XE Authentication Bypass CVE-2023-20198 This repository contains a proof-of-concept exploit for CVE-2023-20198 , an authentication bypass vulnerability affecting Cisco IOS XE Web UI. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable Cisco...
Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction
= doi.org/10.5281/zenodo.18283540 = orcid.org/0009-0007-7728-256X README.md π JAGUARTOOTH Analysis & Research APT28/Fancy Bear -blue?style=for-the-badge π Overview Analisa komprehensif dan rekonstruksi teknis terhadap malware JAGUARTOOTH, sebuah instrumen spionase siber non-persistent yang...
Simple-Ansible-for-CVE-2023-20198
Simple-Ansible-for-CVE-2023-20198 This is a very simple playbook to detect and disable http/https server to prevent the vulnerability. Getting started Simply use the Cisco Always on Sandbox to test example 1. Log into sandbox router and turn on http/https server ssh [email protected]...
CVE-2023-20198-Fix
CVE-2023-20198-Fix This repository contains an Ansible playbook for remediating the CVE-2023-20198 vulnerability found in certain Cisco devices. It does the following: 1. Checks if the web service is running on the router by checking for the associated commands in the running config 2. Disables t...