目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

CVE-2023-20048 PoC — Cisco Firepower Management Center 安全漏洞

来源
关联漏洞
标题:Cisco Firepower Management Center 安全漏洞 (CVE-2023-20048)
Description:Cisco Firepower Management Center(FMC)是美国思科(Cisco)公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center存在安全漏洞,该漏洞源于通过Web服务接口发送的配置命令授权不足,攻击者利用该漏洞可以在受影响的设备上执行某些未经授权的配置命令。
Description
A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.
介绍

# FuegoTest

FuegoTest is a Command Line Interface (CLI) tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center (FMC). Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output.

## Features

- Authenticate with Cisco FMC using provided credentials.
- Fetch and list devices managed by the FMC.
- Detect devices potentially vulnerable to CVE-2023-20048.
- Enhanced terminal output with progress bars and styled text.

## Prerequisites

Before you begin, ensure you have met the following requirements:

- Python 3.6 or higher
- pip for installing dependencies

## Installation

To install FuegoTest, follow these steps:

1. Clone the repository:
   ```bash
   git clone https://github.com/yourusername/FuegoTest.git
   ```
2. Navigate to the FuegoTest directory:
   ```bash
   cd FuegoTest
   ```
3. Install the required Python packages:
   ```bash
   pip install -r requirements.txt
   ```

## Usage

To use FuegoTest, you'll need to provide the URL, username, password, and domain ID of your Cisco FMC. Run the following command and follow the prompts:

```bash
python fuegotest.py detect
```

You can also provide the details as options:

```bash
python fuegotest.py detect --fmc-url=<FMC_URL> --fmc-user=<FMC_USER> --fmc-pass=<FMC_PASS> --domain-id=<DOMAIN_ID>
```
文件快照

[4.0K] /data/pocs/6133b9beca2238b75a776c463b0bd17dc561349d ├── [4.0K] fuegotest │   ├── [2.2K] core.py │   └── [ 0] __init__.py ├── [1.7K] fuegotest.py ├── [1.4K] README.md └── [ 20] requirements.txt 1 directory, 5 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮件到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对 POC 代码进行快照,为了长期维护,请考虑为本地 POC 付费/捐赠,感谢您的支持。