144 matches found
CVE-2018-14847
WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...
mikrotik0dayScanner
Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...
CVE-2018-14847
CVE-2018-14847 This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and upda...
winboxPOC
WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...
routeros-CVE-2018-14847-bytheway
By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...
Mikrotik-router-hack
WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...
Python-MikrotikLoginExploit
Mikrotik 登录漏洞利用 CVE-2018-14847 的 Mikrotik 漏洞概念验证（PoC）（主要针对 Winbox），工作原理是直接从 RouterOS 的默认端口 8291 读取密码。 Original by: https://github.com/BigNerd95/ 依赖要求 Python 3+ 在 Linux 上安装 root@kitploit: apt install python3 使用示例 WinBox（TCP/IP） root@kitploit: python3 WinboxExploit.py 端口 例如： root@kitploit: $ python...
CVE-2018-14847-EXPLOIT
CVE-2018-14847 - MikroTik WinBox File Read 💥 MikroTik RouterOS through version 6.42 is affected by a directory traversal vulnerability in the WinBox interface, allowing unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files. This...
mikrotik-beast
Mikrotik Beast tool Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 This tool allows you to scan a range of network hosts CIDR against the CVE-2018-14847 winbox exploit. Usage $ python3 mikrotikbeast.py Accepted input examples Example 1: '192.168.5.0/24' Example 2: '172.16.0.0/16' NOTES:...
routeros
RouterOS Security Research This repository contains various tools and exploits developed while performing security research on MikroTik's RouterOS. The various projects are broken up into the following subdirectories: 8291honeypot : A honeypot that listens for Winbox messages. 8291scanner : A...
WinboxPoC
WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...
WinboxExploit
WinboxExploit C implementation of BasuCert/WinboxPoC Winbox Critical Vulnerability CVE-2018-14847 Just reimplemented a solution from https://github.com/BasuCert/WinboxPoC...
CVE-2018-14847
🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...
MikroTik-Winbox-Scanner
Winbox 协议扫描器（MikroTik RouterOS） 一款高性能并发扫描器，用于检测互联网上暴露的 MikroTik Winbox 服务。 该工具识别 TCP 端口 8291 上活跃的 Winbox 端点，并对 RouterOS 响应行为进行分类，以确定服务的可用性。 请注意，互联网上暴露了大量的 Winbox 协议，这个工具应该足以让您提高警惕，从而防止您的路由器设备遭受网络攻击。 攻击者可以找到这些协议来利用 CVE-2018-14847，这使他们能够窃取这些设备的凭据。 它旨在用于授权的安全研究、暴露分析和防御性网络审计。 Winbox 协议概述 Winbox 是...
VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS
Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...
Jozini-network-scanner
Jozini 网络扫描器 于 2026-09-05 在南非夸祖鲁-纳塔尔省 Jozini 的 KwaQondile 图书馆使用 Termux（Android 平台）构建 我构建的内容 scanner.py - 端口扫描器，支持横幅抓取（20 个端口）+ 自动保存报告 cvecheck.py - 将 RouterOS 版本映射到已知 CVE final.py - 对目标进行 HTTP 确认 report.txt - 真实扫描报告 实际发现 目标：192.168.182.1（KwaQondile 图书馆） 开放端口：21、22、80、8291、8728 横幅：MikroTik...
Exploit for Path Traversal in Mikrotik Routeros
Ferramentas de Pentest — /rede Repositório de scripts para au...
📄 MikroTik RouterOS WinBox 3.41 Username Enumeration
Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...
