Intex Router N-150 – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： Samrat Das

日期： 2018-06-25

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/44933/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

# Exploit Title: Intex Router N-150 - Cross-Site Request Forgery (Add Admin)

# Date: 2018-06-23

# Exploit Author: Navina Asrani

# Version: N-150

# CVE : N/A

# Category: Router Firmware

# 1. Description

# The firmware allows malicious request to be executed without verifying

# source of request. This leads to arbitrary execution with malicious request

# which will lead to the creation of a privileged user..

# 2. Proof of Concept

# Visit the application

# Go to any router setting modification page and change the values,

# create a request and observe the lack of CSRF tokens.

# Craft an html page with all the details for the built-in admin

# user creation and host it on a server

# Upon the link being clicked by a logged in admin user,

# immediately, the action will get executed

# Exploitation Technique: A attacker can create a rogue admin user to gain

# access to the application.

# Exploit code:

<html>

<body>

</form>

</body>

</html>