CVE-2020-3452 PoC — Cisco Adaptive Security Appliances Software 路径遍历漏洞

Description

Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base.

介绍

# CVE-2020-3452-Exploit
For Educational Purpose ONLY!  
Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances.

## Usage:
By default this uses a file list constructed from sample output from `CVE-2018-0296` in the Metasploit Framework (https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/cisco_directory_traversal.md).
```
Usage: cve-2020-3452.sh <target ip/hostname> <optional_file_name>.txt
Example#1: cve-2020-3452.sh mytarget.com
Example#2: cve-2020-3452.sh mytarget.com cisco_asa_file_list.txt
Files that are downloaded will be in the newly created 'cisco_asa_files' directory
```

文件快照

备注