Mikrotik-router-hack

WinboxExploit Questa è una prova di concetto della critica vulnerabilità WinBox CVE-2018-14847 che permette la lettura arbitraria di file contenenti password in testo chiaro. La vulnerabilità è stata corretta da tempo, quindi questo progetto è terminato e non sarà più supportato o aggiornato. Puo...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux apt install...

winboxPOC

WinboxExploit Dies ist ein Proof of Concept der kritischen WinBox-Schwachstelle CVE-2018-14847, die das beliebige Lesen von Dateien mit Klartext-Passwörtern ermöglicht. Voraussetzungen Python 3+ Dieses Skript läuft NICHT mit Python 2.x oder niedriger. Verwendung Das Skript wird einfach mit...

MikroRoot

MikroRoot Versione automatizzata di CVE-2018-14847. Esegue lo scraping di Shodan per trovare host vulnerabili e tenta di sfruttarli. Come usare Nota: questo script NON funziona con Python 2.x. Usare solo Python 3+. MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass:...

routeros-CVE-2018-14847-bytheway

By the Way By the Way è un exploit che consente di ottenere una shell di root su dispositivi Mikrotik con versioni RouterOS: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 L'exploit sfrutta la vulnerabilità di path traversal CVE-2018-14847 per estrarre la password...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

WinboxPoC

WinboxExploit Questa è una proof of concept della critica vulnerabilità WinBox CVE-2018-14847 che consente la lettura arbitraria di file con password in chiaro. La vulnerabilità è stata riparata da tempo, quindi questo progetto è terminato e non sarà più supportato o aggiornato. Puoi invece...

WinboxExploit

WinboxExploit Implementazione in C di BasuCert/WinboxPoC Vulnerabilità critica di Winbox CVE-2018-14847 Semplicemente reimplementata una soluzione da https://github.com/BasuCert/WinboxPoC...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest-Werkzeuge — /network Repository für Skripte zur Netzwerkauditierung und Penetrationstests. Nur auf Geräten mit formeller Autorisierung verwenden. CVE-2018-14847 — MikroTik Winbox Credential Extractor Beschreibung Nutzt die Schwachstelle zum nicht authentifizierten Auslesen von Dateien im...

CVE-2018-14847

CVE-2018-14847 crea un proxy globale basato su RouterOS tramite CVE-2018-14847 Come Usare preparazione pip3 install paramiko ipcalc optparse hashlib utilizzo per file di IP python3 loop.py -f list.txt per IP singolo python3 loop.py ip Copyright la parte poc in questo repository che usa...

MikroTik-Winbox-Scanner

Winbox Protocol Scanner MikroTik RouterOS A high-performance concurrent scanner designed to detect exposed MikroTik Winbox services on the internet. This tool identifies active Winbox endpoints on TCP port 8291 and classifies RouterOS response behavior to determine service availability. Note that...

Exploit for Path Traversal in Mikrotik Routeros

By the Way By the Way is an exploit that enables a root shell...

Botnet of Thousands of MikroTik Routers Abused in Glupteba, TrickBot Campaigns

Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years. According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the...

TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control

Microsoft on Wednesday detailed a previously undiscovered technique put to use by the TrickBot malware that involves using compromised Internet of Things IoT devices as a go-between for establishing communications with the command-and-control C2 servers. "By using MikroTik routers as proxy server...

Exploit for Path Traversal in Mikrotik Routeros

This is a proof of concept PoC exploit for the critical WinBox vulnerability CVE-2018-14847 that allows for arbitrary file read of plain text passwords. The vulnerability has been fixed, but the project is no longer supported or updated. The exploit is written in Python and uses the socket librar...

Yandex Pummeled by Potent Meris DDoS Botnet

Technical details tied to a record-breaking distributed-denial-of-service DDoS attack against Russian internet behemoth Yandex are surfacing as the digital dust settles. A massive botnet, dubbed Mēris, is believed responsible, flooding Yandex with millions of HTTP requests for webpages at the sam...

Exploit for Path Traversal in Mikrotik Routeros

Mikrotik Login Exploit PoC Proof of Concept dari vulnerabili...

Huawei Router Flaw Leaks Default Credential Status

A vulnerability in some Huawei routers used for carrier ISP services allows cybercriminals to identify whether the devices have default credentials or not – without ever connecting to them. CVE-2018-7900 exists in the router panel and allows credentials information to leak – so attackers can simp...

Fake browser update seeks to compromise more MikroTik routers

This blog post was authored by @hasherezade and Jérôme Segura. MikroTik, a Latvian company that makes routers and ISP wireless systems, has been dealing with several vulnerabilities affecting its products' operating system over the past few months. Ever since a critical flaw in RouterOS was...

MicroTik RouterOS < 6.43rc3 - Remote Root Exploit

/ Exploit Title: RouterOS Remote Rooting Exploit Author: Jacob Baines Vendor Homepage: www.mikrotik.com Software Link: https://mikrotik.com/download Version: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42 Beta: 6.29rc1 - 6.43rc3 Tested on: RouterOS Various CVE : CVE-2018-14847 By the Way is an...