Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2018-14847 PoC — Winbox for MikroTik RouterOS 安全漏洞

Source
Associated Vulnerability
Title:Winbox for MikroTik RouterOS 安全漏洞 (CVE-2018-14847)
Description:MikroTik RouterOS是一套路由操作系统。Winbox for MikroTik RouterOS是一个用于管理MikroTik RouterOS系统的应用程序。 Winbox for MikroTik RouterOS 6.42及之前版本中存在安全漏洞。远程攻击者可通过修改请求利用该漏洞绕过身份验证并读取任意文件。
Readme
# CVE-2018-14847

**create global proxy based on RouterOS via CVE-2018-14847**

## How To Use

*prepare*
```bash
pip3 install paramiko ipcalc optparse hashlib
```

*usage*

for ip file
```bash
python3 loop.py -f [list.txt]
```
for single ip
```bash
python3 loop.py [ip]
```

## Copyright
the poc part in this repository that use CVE-2018-14187 to get username/password is partly forked from [miladdiaz/MikrotikExploit](https://github.com/miladdiaz/MikrotikExploit)  with some changes for creating PPTP server.
File Snapshot

[4.0K] /data/pocs/3784e525b4b99352a098cabcd715f59bcdb47eb3 ├── [6.1K] createVpn.py ├── [1.3K] extract_user.py ├── [1.5K] LICENSE ├── [3.7K] loop.py ├── [ 510] README.md └── [ 36] vpnlist.txt 0 directories, 6 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.