> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # CVE-2025-20393: Script to detect for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager - URL: https://darkwebinformer.com/cve-2025-20393-script-to-detect-for-cisco-secure-email-gateway-and-cisco-secure-email-and-web-manager/ - Published: 2025-12-18T20:55:39.000Z - Updated: 2025-12-18T20:55:39.000Z - Author: Dark Web Informer - Tags: Tools, Vulnerabilities --- GitHub: --- # Cisco SMA Exposure Check [](https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4#cisco-sma-exposure-check) Small, single-file Python 3 script to quickly probe a host or domain for open Cisco Secure Email/Secure Malware Analytics management and quarantine ports (CVE-2025-20393 exposure indicators). ## Usage [](https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4#usage) - Install Python 3 (stdlib only; no extra dependencies). - Run the scanner:python3 cisco-sa-sma-attack-N9bf4.py \[-v\] \[-t \] - The script resolves the target to its first IP, reports any open admin ports (82, 83, 443, 8080, 8443, 9443) and spam quarantine ports (6025, 82, 83, 8443, 9443), performs a lightweight HTTP/S fingerprint on open ports (server header, status, redirects, auth realm, Cisco keywords, version patterns), probes common spam quarantine paths (/quarantine, /spamquarantine, /spam, /sma-login, /login), grabs a raw socket banner, and highlights basic IOC strings (AquaShell, AquaTunnel, Chisel, AquaPurge patterns) if seen. Use `-v` to show all checks performed. ## Notes [](https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4#notes) - Provide an IP directly if you want to bypass DNS resolution. - Use responsibly and only against systems you are authorized to test.