Lucene search
+L

555 matches found

Kitploit
Kitploit
added 2026/09/09 5:50 a.m.4 views

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/08 11:19 p.m.6 views

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/08 8:40 p.m.6 views

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...

9.1CVSS8.1AI score0.01379EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:51 p.m.7 views

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:26 p.m.9 views

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/08 7:25 p.m.10 views

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

9.1CVSS8.2AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/08 6:02 p.m.5 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.4AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 4:02 p.m.6 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/08 10:35 a.m.6 views

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

7.5CVSS7.8AI score0.00591EPSS
SaveExploits7
Malwarebytes
Malwarebytes
added 2026/09/08 9:49 a.m.4 views

MikroTik router flaws allow takeover without a password

CERT Polska warns that attackers are actively exploiting a chain of critical MikroTik RouterOS flaws to seize control of routers exposed to the internet. Although the warning comes from Poland’s national cybersecurity response team, MikroTik routers are sold worldwide, including in the US. The...

9.2CVSS0.00401EPSS
SaveExploits2
NCSC
NCSC
added 2026/09/08 9:46 a.m.5 views

Vulnerabilities in MikroTik RouterOS

MikroTik has addressed several vulnerabilities in RouterOS. The first vulnerability relates to a flaw in the SSH authentication mechanism, where the exponent of RSA keys was not verified. As a result, attackers can forge RSA signatures and gain unauthorized access via SSH. The second vulnerabilit...

9.2CVSS0.00435EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/08 5:09 a.m.4 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/07 4:45 p.m.4 views

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...

7.5CVSS7.3AI score0.04308EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 1:19 p.m.2 views

exploit-mikrotik-2026

CVE-2026-67276 - Exploit de Omisión de Autenticación SSH en MikroTik Omisión de Autenticación de Clave Pública SSH en MikroTik RouterOS - No se Requiere Clave Privada Una prueba de concepto para CVE-2026-67276 MikroTrick, una vulnerabilidad crítica de omisión de autenticación en la implementación...

9.2CVSS0.00243EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/07 1:17 p.m.3 views

CVE-2026-67276

CVE-2026-67276 Donar...

9.2CVSS0.00243EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 10:48 a.m.10 views

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/06 11:05 p.m.1 views

Jozini-network-scanner

Jozini 网络扫描器 于 2026-09-05 在南非夸祖鲁-纳塔尔省 Jozini 的 KwaQondile 图书馆使用 Termux(Android 平台)构建 我构建的内容 scanner.py - 端口扫描器,支持横幅抓取(20 个端口)+ 自动保存报告 cvecheck.py - 将 RouterOS 版本映射到已知 CVE final.py - 对目标进行 HTTP 确认 report.txt - 真实扫描报告 实际发现 目标:192.168.182.1(KwaQondile 图书馆) 开放端口:21、22、80、8291、8728 横幅:MikroTik...

10CVSS0.04362EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/06 11:04 p.m.6 views

mikrotrick-poc

PoC de laboratorio MikroTrick — CVE-2026-67276 omisión de autenticación de clave pública SSH en RouterOS Solo para uso en laboratorio. Ejecutar exclusivamente contra instancias de RouterOS que sean de tu propiedad. Atacar dispositivos que no te pertenecen es un delito CFAA, art. 267 del Código...

9.2CVSS0.00243EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/06 4:57 p.m.7 views

FOISted

root@kitploit: | / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak...

6.4AI score
SaveExploits0References1
NVD
NVD
added 2026/09/05 8:17 p.m.5 views

CVE-2026-67278

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted...

6.3CVSS0.00155EPSS
SaveExploits0References6
Rows per page
Query Builder