CVE-2026-20131

The repository contains obfuscated Python code using PyArmor, which is highly unusual for legitimate PoCs. The lack of readable exploit logic and the presence of obfuscation suggest malicious intent.

This repository contains a low-interaction honeypot designed to mimic a Cisco Secure Firewall Management Center (FMC) web surface and capture unauthenticated Java serialization-style attack traffic. It detects and logs deserialization probes without executing malicious payloads, making it a functional proof-of-concept for studying CVE-2026-20131.

This repository contains a functional exploit PoC for CVE-2026-20131, a critical Java deserialization vulnerability in Cisco Secure Firewall Management Center (FMC) Software. It includes a detection script (`check.py`) and a full exploit (`poc.py`) leveraging ysoserial for unauthenticated remote code execution as root.

The repository contains obfuscated Python code using PyArmor, which is highly suspicious and indicative of malicious intent. The lack of readable exploit logic and the use of obfuscation tools suggest deception.

The repository contains a detection script for CVE-2026-20131, which targets insecure Java deserialization in Cisco Secure Firewall Management Center (FMC). The script probes known endpoints with Java serialization magic bytes to identify potential vulnerability without executing an exploit.