CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

CVE-2018-14847-EXPLOIT

CVE-2018-14847 - MikroTik WinBox 파일 읽기 💥 MikroTik RouterOS 6.42 버전까지의 버전은 WinBox 인터페이스의 디렉터리 순회 취약점의 영향을 받아, 인증되지 않은 원격 공격자가 임의의 파일을 읽고 원격 인증 공격자가 임의의 파일을 쓸 수 있습니다. 이 취약점CVE-2018-14847은 영향을 받는 시스템에 심각한 보안 위험을 초래합니다. 이 취약점은 WinBox 인터페이스의 부적절한 입력 검증으로 인해 존재하며, 공격자가 WinBox 샌드박스 외부의 디렉터리로 이동할 수 있게 합니...

winboxPOC

WinboxExploit 이것은 임의 파일 읽기를 통해 일반 텍스트 비밀번호를 탈취할 수 있는 중요한 WinBox 취약점CVE-2018-14847의 개념 증명입니다. 요구 사항 Python 3+ 이 스크립트는 Python 2.x 이하에서는 실행되지 않습니다. 사용 방법 스크립트는 명령줄에서 간단한 인수로 간단하게 사용됩니다. WinBox TCP/IP 취약점을 악용하여 비밀번호를 읽습니다. root@kitploit: python3 WinboxExploit.py PORT 예시: root@kitploit: $ python3...

CVE-2025-6563

MikroTik 핫스팟 로그인 페이지 반사형 XSS 취약점 권고 개요 MikroTik RouterOS 핫스팟 로그인 페이지에서 반사형 XSSCross-Site Scripting 취약점이 발견되었습니다. 이 취약점은 dst URL 매개변수를 통해 트리거되며, 입력값이 제대로 삭제sanitize되지 않아 피해자 브라우저에서 악성 JavaScript 코드가 실행될 수 있습니다. 영향을 받는 제품 MikroTik RouterOS 핫스팟 로그인 페이지 7.20 미만 버전 취약점 세부 정보 공격자가 다음과 같은 URL을 조작하면 취약점이...

pocs_slides

IoT / 프로토콜 보안과 관련된 제 어드바이저리, PoC, 슬라이드 및 스크립트를 공유합니다. 저는 다음에서 찾을 수 있습니다: Medium: https://medium.com/@cq674350529 블로그: https://cq674350529.github.io/ 메일: [email protected] Twitter: @cq674350529 슬라이드 OffByOne2025: 패치 디핑, 당신은 나의 검! FortiGate의 두 가지 치명적 N-day 취약점에 대한 심층 분석 동영상 BHEU2023: 이론적 한계 깨기...

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH 인증 전 권한 상승을 통한 완전한 관리자 제어 필드| 값 ---|--- CVE| CVE-2026-86060 제품| MikroTik RouterOS SSH 서비스 영향받는 버전| RouterOS 6.x 및 7.0.0 – 7.23.3 포함 수정된 버전| RouterOS 7.23.4 및 이후 취약점 유형| 인증 전 권한 상승 인증 우회 / 접근 제어 결함 공격 벡터| 원격, 비인증, SSH 서비스를 통한 공격 사전 조건| 없음 — 자격 증명, 사용자 상호작용, 로...

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...

Exploit for CVE-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Priv...

MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.20 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an information disclosure vulnerability. RouterOS WebFig contains an unauthenticated file-read vulnerabilit...

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation...

MikroTik RouterOS 7.9 < 7.23.4 / 7.24.x < 7.24.2 SSH Authentication Bypass (CVE-2026-67276)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.9 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an authentication bypass vulnerability. RouterOS does not compare the complete RSA public key when matching ...

MikroTik RouterOS 6.x < 6.49.21 / 7.0.x < 7.23.4 / 7.24.x < 7.24.2 Multiple Vulnerabilities

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 6.x prior to 6.49.21, or 7.0.x prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by multiple vulnerabilities : - RouterOS accepts a 'related' btest connection before...