CVE_2023_20198_Detector

CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Execute various actions on a target web server...

CVE-2017-3881-exploit-cisco-

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

Cisco-FMC-honeypot

FMC-Trap A low-interaction honeypot that mimics a Cisco Secure Firewall Management Center FMC web surface and captures unauthenticated Java serialization-style attack traffic CVE-style insecure deserialization probes. Safe by design: the application does not deserialize Java objects; it detects...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the permission to te...

cve2025-20265

cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN Authentication Bypass Vulnerability CVE-2026-20127 Exploit EXP Basic Usage python scan.py -f targets.txt Display Detailed Information python scan.py -f targets.txt -v Adjust Thread Count and Save Results python scan.py -f targets.txt -t 10 -o vulnerable.txt...

CVE-2018-0114

CVE-2018-0114 Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT. This vulnerability in Cisco's node-jose allows an attacker to forge malicious tokens. JWT allows users to embed public keys using the jwk value inside the header of the token. However,...

CVE-2017-6640-POC

CVE-2017-6640-POC Proof of concept for CVE-2017-6640 as burp extension Cisco Prime Data Center Network Manager DCNM implements a static credentials. See also: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 More specifically, the Web UI requires users...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability CVE-2020-3452 Usage: CVE-2020-3452.py https://target Vulnerability description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Softwar...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

CVE-2020-3452

CVE-2020-3452 A WIP python script to exploit the directory traversal vulnerability in Cisco Adaptive Security Appliance ASAand Cisco Firepower Threat Defense FTD appliance web interfaces. Please note directories will be created for specified targets and any downloaded files will be downloaded to...

CVE-2019-1653

CVE-2019-1653 NSE script to scan for Cisco routers vulnerable to CVE-2019-1653 Usage: nmap --script cve20191653 -p 443...

CVE-2020-3153

CVE-2020-3153 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Steps to follow to get Windows shell on desktop with SYSTEM...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC Read-Only Checker A small, deliberately limited validation utility for CVE-2026-20079 , the Cisco Secure Firewall Management Center FMC authentication-bypass vulnerability. This repository is a checker, not an exploit. It does not contain the session-upgrade, file-write,...

m33tfinder

M33tfinder is a tool to detect active conference ID ranges in a Cisco Meeting Server server. M33tbreak is a tool to test weak passcodes against a conference in Cisco Meeting Server server. Pins.txt contains, for example, 4 digits passcodes. This tools are intended to check if the server is...

Cisco RV132W/RV134W Router - Information Disclosure

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information. id: CVE-2018-012...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...