cve-2023-20198

cve-2023-20198 Descripción. Prueba de concepto de 1vere$k sobre CVE-2023-20198 basada en el Blog. También incluye una verificación de respuesta hexadecimal según el artículo original de Cisco. El script funciona en dos modos: Modo check: solo realiza una conexión a la URL específica y verifica el...

CVE-2018-0296

CVE-2018-0296 Test CVE-2018-0296 and extract usernames from Cisco ASA. Refer to https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ for more technical details. Help Menu root@kitploit: $ ./CVE-2018-0296 -h Options: -h, --help display help information...

CVE-2025-20281-2-Cisco-ISE-RCE

CVE-2025-20281-2-Cisco-ISE-RCE PoC no autenticado en Python para RCE CVE-2025-20281 contra la API de Cisco ISE CVE-2025-20281 PoC no autenticado Una prueba de concepto mínima en Python que explota el RCE no autenticado en la API ERS de Cisco ISE CVE-2025-20281 inyectando comandos de shell...

CVE-2022-20699

CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...

CVE-2021-34730

Cisco RV110W UPnP 0day Analysis Preface UPnP has been a hot topic recently. I happened to have a Cisco RV110W device on hand. In August 2021, Cisco officially disclosed a 0day regarding UPnP in the RV series, but the specific details were not published. So I wanted to debug and exploit this...

Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction

= doi.org/10.5281/zenodo.18283540 = orcid.org/0009-0007-7728-256X README.md root@kitploit: 🐆 JAGUARTOOTH Analysis & Research APT28/Fancy Bear -blue?style=for-the-badge 📑 Overview Analisa komprehensif dan rekonstruksi teknis terhadap malware JAGUARTOOTH, sebuah instrumen spionase siber...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Kit de explotación de desbordamiento SNMP en Cisco iOS CVE-2017-6736 ¿CVE-2018-0296? Recientemente he añadido como submódulo CVE-2018-0296, el cual se puede usar junto con este exploit original para realizar reconocimiento y ver qué contiene el dispositivo de antemano...

CVE-2026-20127

CVE-2026-20127 — Authentication Bypass in Cisco SD-WAN CVSS 10.0 Table of Contents...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

CVE-2023-20198

Cisco Router CVE-2023-20198 Exploitation Tool...

qub-network-security-cve-2023-20198

🛡️ qub-network-security-cve-2023-20198 Análisis, detección y mitigación de la explotación de CVE-2023-20198 en Cisco IOS XE 📘 Queen’s University Belfast – CSC3064 Evaluación de Seguridad de Redes 📋 Resumen de la Evaluación Este proyecto implica analizar archivos PCAP proporcionados por Fox-IT para...

CVE-2022-20866

Comprobador de Claves RSA para CVE-2022-20866 Una vulnerabilidad en el manejo de claves RSA en dispositivos que ejecutan el software Cisco Adaptive Security Appliance y el software Cisco Firepower Threat Defense podría permitir que un atacante remoto no autenticado recupere la clave privada RSA...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey...

day08-CISCO-fmc-sim

Día08 — Simulación de RCE de Gestión estilo Cisco FMC Esta es una simulación educativa mínima que demuestra la clase de impacto de un RCE de análisis del plano de gestión inspirado en CVE-2025-20265. Ejecuta intencionalmente comandos a partir de una entrada manipulada solo para aprendizaje local...

stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

skill-scanner

Skill Scanner...

CVE-2009-4118

CVE-2009-4118 Cliente VPN de Cisco - Desbordamiento de Entero Denegación de Servicio Publicación de Exploit-DB en https://www.exploit-db.com/exploits/10190/ Alerta de Inteligencia oficial de Cisco ID 19445 y Créditos http://tools.cisco.com/security/center/viewAlert.x?alertId=19445 Autor Alex...

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...