asatools

asatools Dépôt principal pour regrouper tous les projets liés à Cisco ASA. Installation Bien que certains sous-projets puissent être utilisés indépendamment, nous recommandons de récupérer tous les sous-projets à l'aide de la commande simple : root@kitploit: git clone --recursive...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass CVE-2025-20362. CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws. Overview Thi...

asafw

asafw Note préliminaire : nous vous recommandons de l'utiliser dans le cadre de asatools mais il peut également être utilisé de manière autonome. asafw est un ensemble de scripts permettant de manipuler le firmware Cisco ASA. Il permet de dépaqueter le firmware requis lors du débogage avec gdb,...

libmempool

libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...

libmempool

libmempool Note préliminaire : nous vous recommandons de l'utiliser dans le cadre de asatools, mais il peut également être utilisé de manière autonome. libmempool est un script Python et un outil d'analyse GDB destiné à faciliter l'analyse des structures de données liées aux mempools trouvées dan...

checker-cve2020-3452

Checker CVE-2020-3452 This Python script checks whether the target server is vulnerable to CVE-2020-3452. Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower...

CVE-2020-3452-Cisco-Python-Scanner

CVE-2020-3452 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Directory Traversal CVE-2020-3452. CVE-2020-3452 is a critical unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files on the Cisco ASA or FTD device. Overview This to...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

CVE-2026-20334 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2026-20222

CVE-2026-20222 affects the EIGRP implementation in Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software. The root cause is improper resource management when processing EIGRP update messages. An unauthenticated, adjacent attacker can send crafted EIGRP updates...

CVE-2026-20331

CVE-2026-20331 affects Cisco Secure Adaptive Security Appliance (ASA) Software , Cisco Secure Firewall Threat Defense (FTD) Software , and Cisco Secure Firewall Management Center (FMC) Software . The vulnerabilities stem from Protection Mechanism Failure issues, grouped under CWE-693, discovered ...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Scanner Cisco ASA Analyse de la CVE-2020-3452 - traversée de chemin non authentifiée Path Traversal affectant les pare-feu Cisco ASA exécutant AnyConnect https://vulners.com/cve/CVE-2020-3452 Documents de référence :...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Script NSE de Nmap para lectura remota no autorizada de archivos en Cisco ASA y FTD...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Script de prueba de concepto para CVE-2020-3452 — Vulnerabilidad de Path Traversal en Cisco ASA/FTD. Admite extracción automatizada de archivos objetivo conocidos con un límite estricto en descargas exitosas por seguridad. Destinado únicamente a pruebas de...

CVE-2018-0296

Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 Author: Yassine Aboukir A security vulnerability identified in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey...

CVE-2018-0296

CVE-2018-0296 Test CVE-2018-0296 and extract usernames from Cisco ASA. Refer to https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ for more technical details. Help Menu root@kitploit: $ ./CVE-2018-0296 -h Options: -h, --help display help information...