764 matches found
MikroTik-RouterOS-6.49.18-Exploit-Kit
MikroTik-RouterOS-6.49.18-Exploit-Kit π Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit π― Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...
mikrotrick-poc
MikroTrick lab PoC β CVE-2026-67276 RouterOS SSH public-key auth bypass Lab use only. Run exclusively against RouterOS instances you own. Attacking devices you do not own is a crime CFAA, Polish art. 267, equivalents. Background CERT PL 2026-09-05 disclosed six RouterOS vulnerabilities, actively...
Python-MikrotikLoginExploit
Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux apt install...
Mikrotrick_POC
RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An automated behavioral validator designed to detect the SSH public key authentication bypass vulnerability in MikroTik RouterOS CVE-2026-67276. The script tests whether an SSH service incomplete-validation flaw allows authentication by...
CVE-2018-5951
CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...
cve-2026-86060
CVE-2026-86060 β MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 β 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...
FOISted
| / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak RouterOS...
Jozini-network-scanner
Jozini Network Scanner Built on 2026-09-05 at KwaQondile Library, Jozini KZN using Termux on Android What I Built scanner.py - Port scanner with banner grabbing 20 ports + auto report saving cvecheck.py - Maps RouterOS version to known CVEs final.py - HTTP confirmation of target report.txt -...
MikrotikExploit
Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: $ apt-get install python3-pip Mac $ ruby -e "$curl -fsSL...
CVE-2018-14847
π MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat π Table of Contents Overview Affected Versions Vulnerability π Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References π...
CVE-2018-14847
WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...
CVE-2024-27686
MikroTik RouterOS Denial of Service Vulnerability π Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...
CVE-2020-11881
CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...
routeros-CVE-2018-14847-bytheway
By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...
MicroTrick
MikroTrick PoC β CVE-2026-86060 RouterOS unauthenticated full takeover pocmikrotrick.py is a self-contained exploit for the SSH attack chain that CERT Polska disclosed as "MikroTrick" on 2026-09-05, exploited in the wild since at least 2026-09-02 against internet-facing MikroTik RouterOS devices....
pocs_slides
Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...
VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS
Pentest Tools β /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 β MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...
CVE-2024-54772
CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...
CVE-2026-mikrotik-poc
MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...
CVE-2025-6563
MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...