CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Cisco iOS SNMP Overflow Exploit Toolkit CVE-2017-6736 CVE-2018-0296? I have recently submodded CVE-2018-0296, which can be used in junction with this original exploit, can be used to do reconnaissance and see what is contained in the appliance beforehand...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Cisco iOS SNMP Overflow Exploit Toolkit CVE-2017-6736...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

SNMP-Brute

SNMP Brute Script de fuerza bruta SNMP, enumeración, descarga de configuración CISCO y descifrado de contraseñas. Escucha cualquier respuesta a las cadenas de comunidad de fuerza bruta, minimizando efectivamente el tiempo de espera. Requisitos metasploit snmpwalk snmpstat john the ripper Uso pyth...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

Concierge

Concierge Toolkit: Physical Access Control Identification and Exploitation The Concierge Toolkit is collection of various scripts and resources to aid the in identification and exploitation of physical access control and monitoring systems. Concierge currently contains tests and/or exploits for t...

CiscoExploit

CiscoExploit Cisco Scan IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

CVE-2022-45701

EN This project provides a Python script to exploit a remote code execution RCE vulnerability CVE-2022-45701 in certain Arris routers. The vulnerability allows authenticated users to execute arbitrary commands on the device by manipulating SNMP settings via the web interface. Disclaimer : This to...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Voltronic Power SNMP Web Pro 1.1 This tool exploits CVE-2026-44402 , a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated...

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: root@kitploit: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB root@kitploit: dirb http://10.10.10.1 Gobuster root@kitploit: gobuster dir -u http://10.129.155.74:3000 -w...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

CVE-2016-6366

CVE-2016-6366 Repositorio público de mejoras para el exploit EXTRABACON, una ejecución remota de código para Cisco ASA escrito por Equation Group NSA y filtrado por Shadow Brokers. Hay shellcode mejorado, un script para encontrar offsets de LINA, un módulo de Metasploit y extrabacon-2.0. Estamos...

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2025-20352

CVE-2025-20352 — Cisco IOS / IOS XE SNMP Stack Overflow Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A stack-based buffer overflow in the SNMP subsystem of Cisco IOS and IOS XE: a crafted SNMP packet to UDP/161 overwrites the stac...

CVE-2026-89147 Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read

Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...

CVE-2026-89147

Net-SNMP through 5.9.5.2 is affected by a denial of service vulnerability in the SMUX module . The function smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and simply send no d...