CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!
CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!
Path: blob/master/documentation/modules/auxiliary/scanner/http/cisco_firepower_download.md
Views: 1904
Vulnerable Application
This module exploits a vulnerability found in Cisco Firepower Management console. A logged in user can abuse the report viewing feature to download an arbitrary file. Authentication is required to exploit this vulnerability.
This module was written specifically against Cisco Firepower Management 6.0.1 (build 1213) during development. To test, you may download the virtual appliance here:
Verification Steps
To use this module, first you need to know an username and password. The management console uses admin:Admin123 by default:
Start msfconsole
use auxiliary/scanner/http/cisco_firepower_downloadset USERNAME [user]set PASSWORD [pass]set RHOSTS [IP]set FILEPATH [file to download]run
If the file is found, it will be saved in the loot directory. If not found, the module should print an error indicating so.
Scenarios
