mikrotik0dayScanner

Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux apt install...

MikroTik-Winbox-Scanner

Winbox Protocol Scanner MikroTik RouterOS A high-performance concurrent scanner designed to detect exposed MikroTik Winbox services on the internet. This tool identifies active Winbox endpoints on TCP port 8291 and classifies RouterOS response behavior to determine service availability. Note that...

📄 MikroTik RouterOS WinBox 3.41 Username Enumeration

Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...

MikroTik Winbox Service Detection

A MikroTik Winbox Service is running at this host. This service is responsible for Winbox tool access, as well as Tik-App smartphone app and Dude probe. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2019-3978

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning...

CVE-2019-3978

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning...

CVE-2019-3978: Missing Authentication for Critical Function

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning...

PT-2019-3891

Name of the Vulnerable Software and Affected Versions RouterOS versions 6.45.6 and below RouterOS versions 6.44.5 and below Description The issue is related to the lack of authentication for a critical function in the RouterOS operating system. This allows a remote attacker to exploit the...

MikroTik RouterOS Winbox Detection

The remote port is used by Winbox, a remote management tool, to administer devices running MikroTik RouterOS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59731; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...