Skip to content

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

Notifications You must be signed in to change notification settings

3ndG4me/CVE-2020-3452-Exploit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 

Repository files navigation

CVE-2020-3452-Exploit

Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances.

Usage:

By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit Framework (https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/cisco_directory_traversal.md).

Usage: cve-2020-3452.sh <target ip/hostname>
Example: cve-2020-3452.sh mytarget.com
Files that are downloaded will be in the newly created 'cisco_asa_files' directory

About

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages