CVE-2016-6366

This is a writeup describing an authentication bypass vulnerability in Cisco ASA 8.X. It outlines requirements and provides a link to the full exploit but does not contain actual exploit code.

This repository contains an improved version of the EXTRABACON exploit for CVE-2016-6366, a remote code execution vulnerability in Cisco ASA devices. It includes functional exploit code, shellcode for multiple versions, and a LINA offset finder script to extend support to additional versions.

This Metasploit module exploits CVE-2016-6366, an authentication bypass vulnerability in Cisco ASA devices via SNMP. It patches authentication functions to allow uncredentialed logins by leveraging version-specific offsets for shellcode execution.