CVE-2022-1026

This exploit leverages an unauthenticated SOAP API vulnerability in Kyocera printers to extract cleartext credentials from the address book. It sends crafted SOAP requests to create and retrieve an address book object, exposing sensitive data like SMB, FTP, and domain credentials.

This repository contains a functional PoC for CVE-2022-1026, targeting Kyocera printers with SOAP 1.1 support. It retrieves credentials and address book data by exploiting an information disclosure vulnerability in the SOAP service.

This is a Golang-based PoC for CVE-2022-1026, which exploits an address book exposure vulnerability in Kyocera Net View. It checks for vulnerable targets and retrieves sensitive address book data via SOAP requests.