CVE-2020-3153

This repository contains a functional exploit for CVE-2020-3153, a vulnerability in Cisco ASA and FTD software. The exploit is written in C# and appears to target a remote code execution (RCE) flaw, likely leveraging a deserialization vulnerability.

This repository contains a functional exploit for CVE-2020-3153, a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. The exploit leverages a crafted command to achieve local privilege escalation by manipulating file paths and executing arbitrary code with SYSTEM privileges.

This repository contains a functional proof-of-concept exploit for CVE-2020-3153, a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. The exploit leverages a crafted command to achieve local privilege escalation by executing a user-controlled binary as SYSTEM via the vpnagent.exe service.

This Metasploit module exploits CVE-2020-3153 and CVE-2020-3433 in Cisco AnyConnect Secure Mobility Client for Windows, leveraging path traversal and DLL hijacking to achieve local privilege escalation via crafted IPC requests to the AnyConnect service.