目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CVE-2023-20048 PoC — Cisco Firepower Management Center 安全漏洞

来源
关联漏洞
标题: Cisco Firepower Management Center 安全漏洞 (CVE-2023-20048)
Description:Cisco Firepower Management Center(FMC)是美国思科(Cisco)公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center存在安全漏洞,该漏洞源于通过Web服务接口发送的配置命令授权不足,攻击者利用该漏洞可以在受影响的设备上执行某些未经授权的配置命令。
Description
A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.
介绍

# FuegoTest

FuegoTest is a Command Line Interface (CLI) tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center (FMC). Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output.

## Features

- Authenticate with Cisco FMC using provided credentials.
- Fetch and list devices managed by the FMC.
- Detect devices potentially vulnerable to CVE-2023-20048.
- Enhanced terminal output with progress bars and styled text.

## Prerequisites

Before you begin, ensure you have met the following requirements:

- Python 3.6 or higher
- pip for installing dependencies

## Installation

To install FuegoTest, follow these steps:

1. Clone the repository:
   ```bash
   git clone https://github.com/yourusername/FuegoTest.git
   ```
2. Navigate to the FuegoTest directory:
   ```bash
   cd FuegoTest
   ```
3. Install the required Python packages:
   ```bash
   pip install -r requirements.txt
   ```

## Usage

To use FuegoTest, you'll need to provide the URL, username, password, and domain ID of your Cisco FMC. Run the following command and follow the prompts:

```bash
python fuegotest.py detect
```

You can also provide the details as options:

```bash
python fuegotest.py detect --fmc-url=<FMC_URL> --fmc-user=<FMC_USER> --fmc-pass=<FMC_PASS> --domain-id=<DOMAIN_ID>
```
文件快照

登录后查看神龙缓存的 POC 文件快照

登录查看
备注
    1. 建议优先通过来源进行访问。
    2. 本地 POC 快照面向订阅用户开放;当原始来源失效或无法访问时,本地镜像作为订阅权益的一部分提供。
    3. 持续抓取、验证、维护这份 POC 档案需要不少投入,因此本地快照已纳入付费订阅。您的订阅是让这份资料能继续走下去的关键,由衷感谢。 查看订阅方案 →