CVE-2018-14847

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Publicación del blog https://n0p.me/winbox-bug-dissection/ Requisitos Python 3+ Este script NO se ejecutará con Python 2....

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

winboxPOC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Requisitos Python 3+ Este script NO se ejecutará con Python 2.x o inferior. Cómo Usar El script se usa de manera simple c...

MikrotikExploit

Exploit de Mikrotik Escanea y exporta contraseñas de RouterOS Te permite escanear subredes IPv4 en bucle con diferentes puertos. Instalación instalar python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 instalar el administrador de paquetes de Python para python3 Ubuntu/Debian:...

CVE-2026-93345

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

CVE-2026-93345

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...

EUVD-2026-84569

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MPREACHNLRI UPDATE message with a prefix-length value...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

CVE-2024-27686

Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS 📌 Descripción Este documento describe una vulnerabilidad de Denegación de Servicio DoS encontrada en ciertas versiones de MikroTik RouterOS. La vulnerabilidad se debe a un manejo insuficiente de solicitudes SMB manipuladas. Un atacante...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

CVE-2018-5951

CVE-2018-5951: Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS Resumen de la Vulnerabilidad Una vulnerabilidad en MikroTik RouterOS permite a un atacante remoto no autenticado forzar el reinicio de un router. Esto se logra enviando un paquete de 1 byte a la dirección IPv6 de RouterO...

CVE-2026-67276

CVE-2026-67276 Donate...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

exploit-mikrotik-2026

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit MikroTik RouterOS SSH Public Key Authentication Bypass - No Private Key Required A proof-of-concept exploit for CVE-2026-67276 MikroTrick, a critical authentication bypass vulnerability in MikroTik RouterOS SSH implementation that allow...

mikrotrick-poc

MikroTrick lab PoC — CVE-2026-67276 RouterOS SSH public-key auth bypass Lab use only. Run exclusively against RouterOS instances you own. Attacking devices you do not own is a crime CFAA, Polish art. 267, equivalents. Background CERT PL 2026-09-05 disclosed six RouterOS vulnerabilities, actively...

Jozini-network-scanner

Jozini Network Scanner Built on 2026-09-05 at KwaQondile Library, Jozini KZN using Termux on Android What I Built scanner.py - Port scanner with banner grabbing 20 ports + auto report saving cvecheck.py - Maps RouterOS version to known CVEs final.py - HTTP confirmation of target report.txt -...

FOISted

root@kitploit: | / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

CVE-2018-14847-EXPLOIT

CVE-2018-14847 - MikroTik WinBox File Read 💥 MikroTik RouterOS through version 6.42 is affected by a directory traversal vulnerability in the WinBox interface, allowing unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files. This...