cisco-ios-xe-implant-detection

Сканирование имплантов Cisco IOS XE и обнаружение в сети Обнаружение в сети эксплуатации CVE-2023-20198 и снятие отпечатков fingerprinting постэксплуатации устройств Cisco IOS XE. Обнаружение в сети CVE-2023-20198 с помощью Suricata Папка suricata/ содержит правила обнаружения Suricata для...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Checkscript based on: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Including the updated where there is an Authorization header to check for the known implant. !! Upgraded to look for upgraded implant The script checks length of...

Cisco_CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Checkscript based on: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Thanks to Atea Redteam for their work. Requires: Python3.7+ Python libs:...