
enum4linux-ng
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security…

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security…

Passive network security sniffer that analyzes 28 protocols (ARP, STP, OSPF, VLAN, SCADA) to detect vulnerabilities in network equipment without…

Layer 2 network attack framework for exploiting STP and CDP protocols, enabling DoS, root role hijacking, and memory exhaustion attacks on Cisco…

Cisco Anyconnect VPN unauth RCE (rwx stack)

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

Public repository for improvements to the EXTRABACON exploit

Emulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.

Test CVE-2018-0296 and extract usernames

Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal

CISCO CVE-2020-3452 Scanner & Exploiter

Proof-of-concept for arbitrary file delete vulnerability in Cisco Secure Client and AnyConnect, enabling privilege escalation to SYSTEM via Windows…

Сollection of TCL scripts for Cisco IOS penetration testing

IP spoofing and SNMP community string brute-forcing tool to bypass ACLs on Cisco IOS devices, exfiltrate configuration files via TFTP.

This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.

CVE-2023-20198 & 0Day Implant Scanner

Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)