只是利用CVE-2020-3452的基本漏洞利用工具,用于枚举CISCO ASA/FTD设备Web目录中可访问的标准文件。
默认情况下,它使用从Metasploit Framework中CVE-2018-0296的示例输出构建的文件列表(https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/cisco_directory_traversal.md)。
Usage: cve-2020-3452.sh <target ip/hostname>
Example: cve-2020-3452.sh mytarget.com
Files that are downloaded will be in the newly created 'cisco_asa_files' directory