staystaystay

staystaystay staystaystay is a proof of concept exploit for CVE-2021-1585, a man in the middle or evil endpoint RCE issue affecting Cisco ASA Device Manager ASDM. The issue was originally discovered by Malcolm Lashley and disclosed in the summer of 2021. However, at the time I was looking at this...

asafw

asafw Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. asafw is a set of scripts to deal with Cisco ASA firmware. It allows someone to unpack firmware required when debugging with gdb, as well as unpacking/repacking them in order to enable...

libtalloc

libtalloc libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" talloc. An introduction is about talloc can be found here: https://talloc.samba.org/talloc/doc/html/index.html libtalloc was inspired by other gdb python scripts for analyzing heaps like...

libmempool

libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...

checker-cve2020-3452

Checker CVE-2020-3452 This Python script checks whether the target server is vulnerable to CVE-2020-3452. Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower...

libdlmalloc

libdlmalloc libdlmalloc is a python script designed for use with GDB that can be used to analyse the Doug Lea's allocator, aka dlmalloc. It currently supports dlmalloc 2.8.x versions. Note that some parts can also be used independently GDB, for instance to do offline analysis of some snapshotted...

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt file format in th...

killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Cisco ASA Scanner Scanning for CVE-2020-3452 - unauth Path Traversal affecting Cisco ASA firewalls running anyconnect https://vulners.com/cve/CVE-2020-3452 Supporting Documents: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the permission to te...

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the target servers from shodan and then find the vulnerable servers to CVE-2020-3452 Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading. About A vulnerability in the web services interface of Cisco Adaptive Security...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2020-3452-Cisco-Python-Scanner

CVE-2020-3452 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Directory Traversal CVE-2020-3452. CVE-2020-3452 is a critical unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files on the Cisco ASA or FTD device. Overview This to...

CVE-2020-3452

CVE-2020-3452 A WIP python script to exploit the directory traversal vulnerability in Cisco Adaptive Security Appliance ASAand Cisco Firepower Threat Defense FTD appliance web interfaces. Please note directories will be created for specified targets and any downloaded files will be downloaded to...

Cisco ASA - Local File Inclusion

Cisco Adaptive Security Appliances ASA web interfaces could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will not reload, but an attacker...