Jacob Baines: Do Not Trust the ASA — Vulnerabilities in Cisco Firewalls
A DEF CON 30 talk about newly discovered vulnerabilities in Cisco ASA and ASA-X firewalls, one of the most widely deployed solutions for protecting enterprise networks.
The speaker demonstrates how these flaws can allow attackers to gain privileged access to the device, the internal network, and the ASA-X FirePOWER module. The talk covers practical exploitation techniques, introduces new tools and Metasploit modules, and discusses potential indicators of compromise and defensive measures.
The speaker demonstrates how these flaws can allow attackers to gain privileged access to the device, the internal network, and the ASA-X FirePOWER module. The talk covers practical exploitation techniques, introduces new tools and Metasploit modules, and discusses potential indicators of compromise and defensive measures.