CVE-2018-14847 PoC — Winbox for MikroTik RouterOS 安全漏洞

Source

https://github.com/mahmoodsabir/mikrotik-beast

Associated Vulnerability

Title:Winbox for MikroTik RouterOS 安全漏洞 (CVE-2018-14847)
Description:MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Description

  Mass MikroTik WinBox Exploitation tool, CVE-2018-14847

Readme

                                                          
                                                               
# Mikrotik Beast tool
  Mass MikroTik WinBox Exploitation tool, CVE-2018-14847     
  This tool allows you to scan a range of network hosts (CIDR) against the CVE-2018-14847 winbox exploit.
  
# Usage 
` $ python3 mikrotikbeast.py`
# 
 <b>Accepted input examples </b><br/>
- Example 1: '192.168.5.0/24'<br/>
- Example 2: '172.16.0.0/16'<br/>
#
  
NOTES:  
This is just an addition to the orginal work @ [BigNerd95/WinboxExploit](https://github.com/BigNerd95/WinboxExploit). <br>
This my first python attempt!. <br>
This is created to help in pentesting in a ISP enviornment. <br>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!