CVE-2018-14847 PoC — Winbox for MikroTik RouterOS 安全漏洞

Source

https://github.com/yukar1z0e/CVE-2018-14847

Associated Vulnerability

Title:Winbox for MikroTik RouterOS 安全漏洞 (CVE-2018-14847)
Description:MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Readme

# CVE-2018-14847

**create global proxy based on RouterOS via CVE-2018-14847**

## How To Use

*prepare*
```bash
pip3 install paramiko ipcalc optparse hashlib
```

*usage*

for ip file
```bash
python3 loop.py -f [list.txt]
```
for single ip
```bash
python3 loop.py [ip]
```

## Copyright
the poc part in this repository that use CVE-2018-14187 to get username/password is partly forked from [miladdiaz/MikrotikExploit](https://github.com/miladdiaz/MikrotikExploit)  with some changes for creating PPTP server.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →