CVE-2020-3452

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-3452 Run bellow command to check CVE-2020-3452 -h Configurations 2. We integrated with the Telegram API...

CVE-2020-3452

CVE-2020-3452 Unauthenticated file read in Cisco ASA & Cisco Firepower Saikat Karmakar | Nov : 2021 This will test if the given host is vulnerable to CVE 2020-3452 or not Requirements: root@kitploit: requests termcolor Usage: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage:...

CVE-2020-3452

This repository does not have a README...

CVE-2020-3452_auto

Enum Cisco ASA via CVE-2020-3452 and download files root@kitploit: python enum.py target Convert Lua byte code using unluac root@kitploit: bash convert.sh...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

CVE-2020-3452-PoC

CVE-2020-3452 Hola chicos, este es un script simple para descargar el script NSE de nmap, colocarlo en el archivo de módulos NSE y ejecutar el comando nmap con los hosts que quieras Coloca tu lista de hosts en el archivo list.txt Gracias...

Cisco-ASA-LFI

Cisco-ASA-LFI CVE-2020-3452 Cisco Adaptive Security Appliance Software - Local File Inclusion Vuln Test sciript Usage root@kitploit: python Cisco Adaptive Security Appliance Software 9.11 - Local File InclusionCVE-2020-3452.py IP default : 80/tcp python Cisco Adaptive Security Appliance Software...

CVE-2020-3452

CVE-2020-3452 TL;DR This is an exploit for CVE-2020-3452. It's not entirely finished yet. Use it in legal context. If you fuck up it's your problem. W00t is dis? This is a quick'n dirty try to enhance the original PoC of CVE-2020-3452. At the current stage there is nothing more than a simple py...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Script NSE de Nmap para lectura remota no autorizada de archivos en Cisco ASA y FTD...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit Framework...

Security Bulletin: IBM Transformation Extender Advanced v10.0.x is affected by a vulnerability in its dependencies

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to Unix File Parameter Alteration Vulnerability Details CVEID:CVE-2020-3452 DESCRIPTION: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow a remote...

U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA

i found out that https://█████████/ was vulnerable to CVE-2020-3452 The IP has a SSL certificate pointing to █████████ curl -kv https://██████████/ Output Server certificate: subject: C=US; ████.mil Impact Anyone can read any file present on the server. System Hosts ███ Affected Products and...

U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA

i found out that https://█████/ was vulnerable to CVE-2020-3452 The IP has a SSL certificate pointing to ██████████ curl -kv https://███████/ Output; Server certificate: ███ Impact Anyone can read any file present on the server. System Hosts █████ Affected Products and Versions CVE Numbers...

U.S. Dept Of Defense: [CVE-2020-3452] on ███████

The following subdomain is vulnerable to CVE-2020-3452, which is an unauthenticated file read in Cisco ASA & Cisco Firepower. URL: https://████/ Vulnerable URL: https://███/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ ██████████ Resources:...

U.S. Dept Of Defense: Path Traversal - [ CVE-2020-3452 ]

Hello, I would like to report Path Traversal issue CVE-2020-3452 was found on https://█████/. POC: https://█████████/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ Impact https://nvd.nist.gov/vuln/detail/CVE-2020-3452 System Hosts ███ Affected...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-20...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco Adaptive Security Appliance Software and Firepower Threa...

Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal (2)

Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal 2 Date: 12 Dec 2020 Exploit Author: [email protected] Vendor Homepage: cisco.com Software Link: It’s against Hardware, specifically ASA’s and FTD’s Version: ASAs from version 9.6 to 9.14.1.10 and FTD’s versions 6.2.3 to...

Cisco ASA 9.14.1.10 / FTD 6.6.0.1 Path Traversal

Exploit Title: Cisco ASA 9.14.1.10 and FTD 6.6.0.1 - Path Traversal 2 Date: 12 Dec 2020 Exploit Author: [email protected] Vendor Homepage: cisco.com Software Link: It’s against Hardware, specifically ASA’s and FTD’s Version: ASAs from version 9.6 to 9.14.1.10 and FTD’s versions 6.2.3 to...

Cisco ASA and FTD 9.6.4.42 - Path Traversal

Exploit Title: Cisco ASA and FTD 9.6.4.42 - Path Traversal Date: 2020-10-10 Exploit Author: 3ndG4me Vendor: www.cisco.com Product: https://www.cisco.com/c/en/us/products/security/asa-firepower-services/index.html CVE : CVE-2020-3452 TARGET=$1 CISCOKNOWNFILES="logo.gif httpauth.html userdialog.htm...