/CVE-2020-3153

POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability

Primary LanguageC#GNU General Public License v3.0GPL-3.0

CVE-2020-3153

POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability

Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/

Steps to follow to get Windows shell on desktop with SYSTEM privilege:

  1. In file class1.cs, Change the Username string to your user account directory in CAC-nc-install commandline parameter.
  2. Create directory path "Program Files (x86)/Cisco/Cisco AnyConnect Secure Mobility Client/Plugins/" inside your userhome.
  3. Copy actoast.dll on the above path.

POC demo video

CVE-2020-3153 POC

Follow my work at: https://nixhacker.com