CVE-2018-0296

This Metasploit module exploits a path traversal vulnerability (CVE-2018-0296) in Cisco ASA devices to retrieve sensitive system information without authentication. It sends crafted HTTP requests to traverse directories and extract file listings, session data, and usernames.

This exploit leverages a path traversal vulnerability in Cisco ASA and FTD software to retrieve sensitive system information, including directory listings, active sessions, and user details, without authentication. It sends crafted HTTP requests to specific endpoints and parses the responses to extract data.

This is a Python-based exploit for CVE-2018-0296, a path traversal vulnerability in Cisco ASA and FTD software. It allows unauthenticated access to sensitive system information by traversing directories and dumping file contents, active sessions, and usernames.

This Go-based tool checks for the presence of CVE-2018-0296, a directory traversal vulnerability in Cisco ASA devices. It verifies if the target is a Cisco VPN device and attempts to exploit the vulnerability to leak session information.

This Python script exploits CVE-2018-0296, a path traversal vulnerability in Cisco ASA devices, to retrieve sensitive files from the target system. It checks for vulnerability by sending a crafted request and saves the results to a file.

The repository contains a functional Python script that exploits CVE-2018-0296, a path traversal vulnerability in Cisco ASA and FTD software, allowing unauthenticated access to sensitive system information. The script automates the retrieval of directory listings, active sessions, and user data via crafted HTTP requests.

This Go-based tool scans for CVE-2018-0296, a directory traversal vulnerability in Cisco ASA devices. It checks for the presence of vulnerable endpoints and attempts to enumerate session files.

This Metasploit module exploits a directory traversal vulnerability (CVE-2018-0296) in Cisco ASA and Firepower Threat Defense (FTD) software. It allows an attacker to list files and sessions, including logged-in users, by manipulating paths in the VPN web service.