CVE-2024-54772 PoC — MikroTik RouterOS 安全漏洞

Source

https://github.com/Seven11Eleven/CVE-2024-54772

Associated Vulnerability

Title:MikroTik RouterOS 安全漏洞 (CVE-2024-54772)
Description:MikroTik RouterOS是拉脱维亚MikroTik公司的一套基于Linux开发的路由器操作系统。该系统可部署在PC中，使其提供路由器功能。 MikroTik RouterOS v6.43版本至v7.16.1版本存在安全漏洞，该漏洞源于使用有效用户名和无效用户名进行的连接尝试之间的响应时间存在差异，可能导致攻击者可以枚举有效帐户。

Readme

# [CVE-2024-54772 implemented in Rust](https://nvd.nist.gov/vuln/detail/CVE-2024-54772)

## this vulnerability allows to enumerate valid mikrotik router usernames

File Snapshot


 [4.0K]  /data/pocs/34a85ba0ee7be80ae66e9afea4044de8a197257d
├── [ 158]  Cargo.lock
├── [  85]  Cargo.toml
├── [ 162]  README.md
└── [4.0K]  src
    └── [1.4K]  main.rs

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!