CVE-2020-3580 PoC — 多款Cisco产品跨站脚本漏洞

Description

Automated bulk IP scanner Cisco ASA and FTD XSS

介绍

<h1 align="center">
  <br>
 CVE-2020-3580 Automated Scanner 
</h1>

<h4 align="center">CVE-2020-3580 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software XSS.</h4>

## Installation Commands
Clone the repository
```
git clone https://github.com/imhunterand/CVE-2020-3580.git
```
Go to the newly created directory
```
cd CVE-2020-3580
```
To download the requirements
```
pip3 install -r requirements.txt
pip install -r requirements.txt
```
To run the script
```
python main.py
```
# CVE-2020-3580
Additional exploits for XSS in Cisco ASA devices discovered by @Pwn0sec

# Usage
- Stage (address change me)
- Demonstrate
  - Logon to Cisco ASA WebVPN
  - Visit staged malicious page
  - Recover your credentials
- Patch ;)

# Example / Result
![animated demonstration](https://i.ibb.co/41JV4Nh/asa-credentials.gif)


# Credit's
 - **[Imhunterand](https://github.com/imhunterand)**
 - **[pwn0sec](https://github.com/pwn0sec)**

文件快照

备注