CVE-2018-0171

Cisco SmartInstall Exploit [CVE-2018-0171]

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171 Inspired from C Papathanasiou PoC This Python 3 script uses port 4786 on a Cisco device running SmartInstall to exploit CVE-2018-0171 With the use of this exploit, an attacker can craft a payload, send it to the Cisco device, and then extract the contents of the running-config file The Cisco Smart Exploit script

For novices

滲透基礎 以下內容皆參考他人之網頁。 所有內容請用於對自己的設備或環境進行測試，本站不負任何法律責任。 流程 偵查(受測)目標 google hacking 網站目錄列舉 掃描網路 nmap acunetix Zmap 漏洞或弱點利用 XSS SQL Injection 上傳web shell 密碼破解 cve等已知漏洞 提升權限 維持存取 google ha

Mitigate Networking CVE This repo is to show how to write a Playbook to mitigate CVEs for networking devices This is used as a demonstration only and should be modified to run in your particular environment For demonstration purposes are trying to write for CVE-2018-0171 for IOS and IOS-XE which we treat as one networking platform from an Ansible perspective

A wrapper for Cisco's smi_check.py file.

SmartInstall A wrapper for Cisco's smi_checkpy file Requirements Python 3x Python 27 The Cisco script is written in Python 27 The guys at embedicom released a remote code exploit for Cisco's Smart Install protocol at GeekPWN 2017 Hong Kong The Smart install protocol is used for automatic switch deployment and is enabled by default on many models including th