Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

Exploit for CVE-2026-84411

CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Ex...

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

Python-MikrotikLoginExploit

استغلال تسجيل الدخول إلى Mikrotik إثبات المفهوم PoC للثغرة الأمنية في Mikrotik CVE-2018-14847 خاصةً على Winbox، تعمل بطريقة قراءة كلمة المرور مباشرةً من RouterOS على المنفذ الافتراضي 8291. الأصلي بواسطة: https://github.com/BigNerd95/ المتطلبات Python 3+ التثبيت على Linux apt install python3 مثال...

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: $ apt-get install python3-pip Mac $ ruby -e "$curl -fsSL...

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

CVE-2025-6563

نشرة استشارية: ثغرة XSS المنعكسة في صفحة تسجيل الدخول إلى نقطة اتصال MikroTik نظرة عامة تم اكتشاف ثغرة من نوع Cross-Site Scripting XSS المنعكسة في صفحة تسجيل الدخول إلى نقطة الاتصال Hotspot في MikroTik RouterOS. تُستغل الثغرة عبر معامل URL المسمى dst، الذي لا يعقّم المدخلات بشكل صحيح، مما يسمح...

pocs_slides

Je partage mes advisories, PoC, diapositives et scripts liés à la sécurité IoT / des protocoles. Retrouvez-moi ici : Medium : https://medium.com/@cq674350529 Blog : https://cq674350529.github.io/ E-mail : [email protected] Twitter : @cq674350529 Diapositives OffByOne2025 : Patch Diffing, vou...

routeros

RouterOS Security Research This repository contains various tools and exploits developed while performing security research on MikroTik's RouterOS. The various projects are broken up into the following subdirectories: 8291honeypot : A honeypot that listens for Winbox messages. 8291scanner : A...

WinboxPoC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...

cve-2026-86060

CVE-2026-86060 — Élévation de privilèges avant authentification via SSH sur MikroTik RouterOS jusqu'au contrôle administratif total Champ| Valeur ---|--- CVE| CVE-2026-86060 Produit| MikroTik RouterOS service SSH Versions affectées| RouterOS 6.x et 7.0.0 – 7.23.3 inclus Versions corrigées| Router...

Mikrotrick_POC

Validateur de Confusion de Modulus SSH RouterOS CVE-2026-67276 Un validateur comportemental automatisé conçu pour détecter la vulnérabilité de contournement de l'authentification par clé publique SSH dans MikroTik RouterOS CVE-2026-67276. Le script teste si un défaut de validation incomplète du...

Chimay-Red

Chimay-Red Rétro-ingénierie de l'exploit Mikrotik issu des fuites CIA Vault 7 Voir le PDF pour plus d'informations non mis à jour Versions vulnérables Jusqu'à RouterOS 6.38.4 Nouveautés dans 6.38.5 2017-Mar-09 11:32 : ! www - correction de la vulnérabilité du serveur http ; Preuves de concept...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

تحقيق SOC L1 للتهديدات: خدمات متعددة مكشوفة على MikroTik RouterOS المحلل: Jonatan Alexander Guerrero Gomez | الدور المستهدف: محلل SOC L1 / محلل أمن سيبراني مبتدئ الحالة: التحقيق مغلق | الخطورة: عالية الملخص التنفيذي تمرين استباقي لاصطياد التهديدات لتحديد جهاز MikroTik RouterOS مواجه للعموم مع خدم...

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...