Add Cisco directory traversal auxiliary module

[space-r7]

This module exploits a directory traversal vulnerability on Cisco products running the Adaptive Security Appliance (ASA) software < v9.6 and Firepower Threat Defense (FTD) software < v6.2.3.
Sending a specially crafted HTTP request results in viewing the contents of directories that would otherwise require authentication to view.

Verification

List the steps needed to make sure this thing works

• Start msfconsole
• use auxiliary/scanner/http/cisco_directory_traversal
• set RHOSTS [IP]
• run
• You should see the files of each of the paths searched

[wchen-r7]

Release Notes

The Cisco directory traversal module exploits a directory traversal vulnerability on Cisco products running the Adaptive Security Appliance (ASA) software < v9.6 and Firepower Threat Defense (FTD) software < v6.2.3. Sending specially crafted HTTP request results in the ability to view the contents of directories that would otherwise require authentication to view.