CVE-2020-3580 PoC — Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scrip

Source

https://github.com/imhunterand/CVE-2020-3580

Associated Vulnerability

Title:Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities (CVE-2020-3580)
Description:Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information. Note: These vulnerabilities affect only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section.

Description

Automated bulk IP scanner Cisco ASA and FTD XSS

Readme

<h1 align="center">
  <br>
 CVE-2020-3580 Automated Scanner 
</h1>

<h4 align="center">CVE-2020-3580 - Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software XSS.</h4>

## Installation Commands
Clone the repository
```
git clone https://github.com/imhunterand/CVE-2020-3580.git
```
Go to the newly created directory
```
cd CVE-2020-3580
```
To download the requirements
```
pip3 install -r requirements.txt
pip install -r requirements.txt
```
To run the script
```
python main.py
```
# CVE-2020-3580
Additional exploits for XSS in Cisco ASA devices discovered by @Pwn0sec

# Usage
- Stage (address change me)
- Demonstrate
  - Logon to Cisco ASA WebVPN
  - Visit staged malicious page
  - Recover your credentials
- Patch ;)

# Example / Result
![animated demonstration](https://i.ibb.co/41JV4Nh/asa-credentials.gif)


# Credit's
 - **[Imhunterand](https://github.com/imhunterand)**
 - **[pwn0sec](https://github.com/pwn0sec)**

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!