Lucene search
+L

535 matches found

Kitploit
Kitploit
added 2026/08/31 11:39 p.m.5 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

9.1CVSS7.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/31 7:19 p.m.8 views

Mikrotik-router-hack

WinboxExploit これは、重大なWinBox脆弱性CVE-2018-14847の概念実証であり、平文パスワードの任意ファイル読み取りを可能にします。 この脆弱性はとっくに修正されているため、このプロジェクトは終了し、今後サポートや更新は行われません。代わりにフォークして自分で更新してください。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインで単純な引数を使用して簡単に使えます。 WinBox TCP/IP...

9.1CVSS7.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/31 5:09 p.m.3 views

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:45 p.m.4 views

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS サービス拒否脆弱性 脆弱性概要 MikroTik RouterOS の脆弱性により、認証されていないリモート攻撃者がルーターを強制的に再起動させることができます。これは、IP プロトコル 97 を使用して RouterOS の IPv6 アドレスに 1 バイトのサイズのパケットを送信することで行われます。EoIPv6 をサポートするすべてのバージョンの RouterOS がこの攻撃に対して脆弱である可能性があります。この攻撃には、ターゲットシステムで IPv6 が有効であり、かつ少なくとも 1...

7.5CVSS7.1AI score0.04308EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 9:08 a.m.2 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS ユーザー名列挙 このリポジトリには、RouterOS stable バージョン v6.43 から v7.17.2 を実行している Mikrotik ルーターで(ワードリストを使用して)有効なユーザー名を列挙できる CVE-2024-54772 のエクスプロイトが含まれています。パッチは v6.49.18 および v7.18 で利用可能です。long-term リリースの場合、影響を受けるバージョンは v6.43.13 から v6.49.13 です。次のリンクで RouterOS 変更ログ を確認してください。...

5.4CVSS6AI score0.00777EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/31 7:56 a.m.5 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.3AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:51 a.m.3 views

CVE-2018-14847

WinboxExploit これは、クリティカルなWinBoxの脆弱性(CVE-2018-14847)の概念実証であり、プレーンテキストのパスワードの任意のファイル読み取りを可能にします。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインでシンプルな引数を使って簡単に使用できます。 WinBox TCP/IP 脆弱性を悪用してパスワードを読み取ります。 root@kitploit: python3...

9.1CVSS7.5AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/31 3:57 a.m.3 views

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

9CVSS7.7AI score0.07431EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 12:57 a.m.5 views

CVE-2025-6563

MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...

4.8CVSS6AI score0.00674EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/30 4:57 p.m.4 views

FOISted

| / |/| | | | | | | | | || | | | | | | ||| | | || | | / / | | | | | | || | | || / | | || /|/ |, | FOISted:MikroTik 远程越狱 描述 FOISted 是针对 MikroTik RouterOS 中两个认证后漏洞的利用工具。它可以远程越狱运行 6.34(2016 年)到 6.49.6(最新的 v6 版本)的 RouterOS。 本仓库包含一个针对 x86 设备的利用脚本。该漏洞在其他设备版本上同样存在;编写 ropchain 的任务就留给读者作为练习吧 :...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/29 4:31 p.m.5 views

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Strumenti di Pentest — /rede Repository di script per audit e test di penetrazione sulle reti. Utilizzare solo su dispositivi con autorizzazione formale. CVE-2018-14847 — MikroTik Winbox Credential Extractor Descrizione Sfrutta la vulnerabilità di lettura file non autenticata nel servizio Winbox ...

9.1CVSS7.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/29 9:52 a.m.5 views

CVE-2024-27686

Vulnerabilità di Denial of Service in MikroTik RouterOS 📌 Descrizione Questo documento descrive una vulnerabilità Denial of Service DoS riscontrata in alcune versioni di MikroTik RouterOS. La vulnerabilità è dovuta alla gestione insufficiente delle richieste SMB appositamente create. Un attaccant...

7.5CVSS7.2AI score0.00591EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/29 5:55 a.m.5 views

pocs_slides

Condivido i miei advisory, PoC, slide e script sulla sicurezza di IoT e protocolli. Puoi trovarmi qui: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slide OffByOne2025: Patch Diffing, sei la mia spada! Un'analisi...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/28 10:24 a.m.6 views

CVE-2018-14847-EXPLOIT

CVE-2018-14847 - MikroTik WinBox Lettura File 💥 MikroTik RouterOS fino alla versione 6.42 è affetto da una vulnerabilità di directory traversal nell'interfaccia WinBox, che consente a utenti remoti non autenticati di leggere file arbitrari e a utenti remoti autenticati di scrivere file arbitrari...

9.1CVSS8.8AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/27 1:42 a.m.4 views

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Path traversal não autenticado no protocolo Winbox da MikroTik que vaza credenciais de administrador de /flash/rw/store/user.dat 📑 Índice Visão Geral Versões Afetadas Vulnerabilidade 📂 Protocolo Winbox Path Traversal Descriptografia de Senha Backdoor do Desenvolvedor...

9.1CVSS8.8AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/26 9:39 p.m.4 views

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Riepilogo del progetto MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Panoramica È stato creato un progetto professionale e completo per compromettere i dispositivi MikroTik RouterOS 6.49.18, che include tutti i componenti richiesti con un'interfaccia araba comple...

9.1CVSS8.4AI score0.01379EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:08 a.m.4 views

mikrot8over

mikrot8over mikrot8over: strumento di sfruttamento rapido per Mikrotik RouterOS fino alla versione 6.38.4 Descrizione Questa è una rielaborazione dell'originale Mikrotik Exploit. Sono state aggiunte la compatibilità con Python 2 e funzionalità di scansione multithreading. Versione Python L'utilit...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:18 p.m.5 views

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux root@kitploit:...

9.1CVSS8.7AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/25 5:09 a.m.6 views

winboxPOC

WinboxExploit Questa è una prova di concetto della vulnerabilità critica WinBox CVE-2018-14847 che consente la lettura arbitraria di file contenenti password in chiaro. Requisiti Python 3+ Questo script NON funzionerà con Python 2.x o versioni inferiori. Come Usare Lo script è semplice e si usa c...

9.1CVSS8.7AI score0.96087EPSS
SaveExploits24
NVD
NVD
added 2026/07/30 7:17 p.m.15 views

CVE-2026-14227

An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user‑group changes. As a result, an...

6.9CVSS0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder