CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage root@kitploit: $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

firecall

firecall Automatiza la comunicación SSH con firewalls, switches, etc. Descripción Estos scripts están diseñados para automatizar el envío de comandos a un firewall Cisco ASA. El propósito aquí es eliminar la necesidad de iniciar sesión manualmente en un firewall para realizar cambios. Este código...

CVE-2020-3580

CVE-2020-3580 Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm Usage Stage address change me Demonstrate Logon to Cisco ASA WebVPN Visit staged malicious page Recover your credentials Patch ; Example / Result...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass CVE-2025-20362. CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws. Overview Thi...

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the target servers from shodan and then find the vulnerable servers to CVE-2020-3452 Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading. About A vulnerability in the web services interface of Cisco Adaptive Security...

CVE-2020-3452

CVE-2020-3452 Un script de Python WIP para explotar la vulnerabilidad de traversal de directorios en las interfaces web de Cisco Adaptive Security Appliance ASA y Cisco Firepower Threat Defense FTD. Tenga en cuenta que se crearán directorios para los objetivos especificados y cualquier archivo...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability CVE-2020-3452 Usage: CVE-2020-3452.py https://target Vulnerability description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Softwar...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...

killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

theway

The Way The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager ASDM packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance ASA systems e.g. firewalls and VPNs. The ASDM package is hosted on the ASA and sub-components...

CVE-2020-3580

CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt fi...

idahunt

Overview Requirements Features Scripting Usage Simulate without executing Initial analysis Execute IDA Python script Binary diffing Requirements Initial analysis Diffing files Diffing a function Filters Architecture detection Target-specific Known projects using idahunt Overview idahunt is a...

libptmalloc

libptmalloc libptmalloc is a python library to examine ptmalloc the glibc userland heap implementation. It is currently designed for use with GDB but could easily be adapted to work with other debuggers. Installation Please refer to the Install Guide. Usage Please refer to the User Guide. Support...

libmempool

libmempool Nota preliminar: recomendamos usar esto como parte de asatools pero también se puede usar de forma independiente. libmempool es un script de Python y una herramienta de análisis para GDB que ayuda en el análisis de las estructuras de datos relacionadas con mempool que se encuentran...

libmempool

libmempool Preliminary note: we recommend you to use this as part of asatools but it can also be used standalone. libmempool is a python script and GDB analysis tool to aid in the analysis of mempool-related data structuress found inside various heaps on Cisco ASA devices. Normally this informati...