
CVE-2020-3580
Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]

Heap analysis tooling for mempool

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

Shell script exploiting CVE-2020-3452 for directory traversal on Cisco ASA/FTD appliances to enumerate and download files from the web directory.

Proof-of-concept exploit for CVE-2022-20699, an unauthenticated remote code execution vulnerability in Cisco AnyConnect VPN with rwx stack.

Cisco Anyconnect VPN unauth RCE (rwx stack)

Exploit for CVE-2018-0114: re-signs JWT tokens by embedding an attacker-controlled public key in the JWS header, bypassing authentication in…

Crypt and decrypt the cisco enable 7 passwords

Automated enumeration and file download tool exploiting CVE-2020-3452 in Cisco ASA devices, with Lua bytecode decompilation support.

Cisco RV110w UPnP stack overflow

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

CISCO CVE-2020-3452 Scanner & Exploiter

Automated bulk IP or domain scanner for CVE 2020 3580. Cisco ASA and FTD XSS hunter.

Exploit for CVE-2020-3580, a Cisco ASA/FTD XSS vulnerability, enabling proof-of-concept testing and security assessment of affected devices.

Proof-of-concept exploit for CVE-2020-3452, a path traversal vulnerability in Cisco ASA and FTD devices, enabling unauthorized file read.

Proof-of-concept exploit for CVE-2020-3187 targeting Cisco ASA/FTD session password disclosure via crafted HTTP cookie header.

CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense