hardware
hardware 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Nintendo Switch – WebKit Code Execution (PoC)
CVE-2016-4657 Switch PoC
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 – Denial of Service
#!/usr/bin/python
Wireless IP Camera (P2P) WIFICAM – Remote Code Execution
// Exploit-DB Note ~ Source: https://pierrekim.github.io/advisories/expl-goahead-camera.c
ASUSWRT RT-AC53 (3.0.0.4.380.6038) – Remote Code Execution
Remote Code Execution
ASUSWRT RT-AC53 (3.0.0.4.380.6038) – Session Stealing
Session Stealing
ASUSWRT RT-AC53 (3.0.0.4.380.6038) – Cross-Site Scripting
Cross-Site Scripting (XSS)
MikroTik Router – ARP Table OverFlow Denial Of Service
#Exploit Title: MikroTik Router Denial Of Service | ARP Table OverFlow
EPSON TMNet WebConfig 1.00 – Cross-Site Scripting
# Exploit Title: Persistent XSS in EPSON TMNet WebConfig Ver. 1.00
Conext ComBox 865-1058 – Denial of Service
#Exploit Title: Conext ComBox - Denial of Service (HTTP-POST)
D-Link DSL-2730U Wireless N 150 – Cross-Site Request Forgery
Author : B GOVIND
Netgear DGN2200v1/v2/v3/v4 – Cross-Site Request Forgery
# Exploit Title: NETGEAR Firmware DGN2200v1/v2/v3/v4 CSRF which leads to RCE through CVE-2017-6334
WePresent WiPG-1500 – Backdoor Account
# Exploit Title: CVE-2017-6351 - WePresent undocumented privileged manufacturer backdoor account
Netgear DGN2200v1/v2/v3/v4 – ‘dnslookup.cgi’ Remote Command Execution
#!/usr/bin/python
D-Link DCS Series Cameras – Insecure Crossdomain
# Exploit Title: [Insecure CrossDomain.XML in D-Link DCS Series Cameras]
DIGISOL DG-HR1400 Wireless Router – Cross-Site Request Forgery
Digisol Router CSRF Exploit - Indrajith A.N
Netgear DGN2200v1/v2/v3/v4 – ‘ping.cgi’ Remote Command Execution
#!/usr/bin/python
Cisco ASA – WebVPN CIFS Handling Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=998
F5 BIG-IP 11.6 SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure
# -*- coding: utf-8 -*-
D-Link DIR-600M – Cross-Site Request Forgery
# Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery (CSRF) vulnerability
F5 BIG-IP SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure
# Exploit Title: [Ticketbleed (CVE-2016-9244) F5 BIG-IP SSL virtual server Memory Leakage]
Netwave IP Camera – Password Disclosure
#!/usr/bin/python2.7
QNAP NVR/NAS Devices – Buffer Overflow (PoC)
Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS (May be additional re-branded)
Billion / TrueOnline / ZyXEL Routers – Multiple Vulnerabilities
>> Multiple vulnerabilities in TrueOnline / ZyXEL / Billion routers
Netman 204 – Backdoor Account / Password Reset
# Exploit Title: Netman 204 Backdoor and weak password recovery function
Netgear Routers – Password Disclosure
Trustwave SpiderLabs Security Advisory TWSL2017-003:
Polycom VVX Web Interface – Change Admin Password
# Exploit Title: Polycom VVX Web Interface - Change Admin Password as User
TM RG4332 Wireless Router – Arbitrary File Disclosure
# Exploit Title: TM RG4332 Wireless Router Traversal Arbitrary File Read
WD My Cloud Mirror 2.11.153 – Authentication Bypass / Remote Code Execution
# Exploit Title: WD My Cloud Mirror 2.11.153 RCE and Authentication Bypass
Pirelli DRG A115 v3 ADSL Router – DNS Change
#!/bin/bash
Tenda ADSL2/2+ Modem D820R – DNS Change
#!/bin/bash
Tenda ADSL2/2+ Modem D840R – DNS Change
#!/bin/bash
Pirelli DRG A115 ADSL Router – DNS Change
#!/bin/bash
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 – Multiple Vulnerabilities
# Exploit Title: [Trend Micro Interscan Web Security Virtual Appliance (IWSVA) 6.5.x Multiple Vulnerabilities]
Huawei Flybox B660 – Cross-Site Request Forgery (2)
Document Title:
D-Link DIR-615 – Multiple Vulnerabilities
# Title: D-Link DIR-615 Multiple Vulnerabilities
Huawei Flybox B660 – Cross-Site Request Forgery (1)
Document Title:
QNAP NAS Devices – Heap Overflow
==================
Dell SonicWALL Secure Mobile Access SMA 8.1 – Cross-Site Scripting / Cross-Site Request Forgery
Dell SonicWALL Secure Mobile Access SMA 8.1 XSS And WAF CSRF
Dell SonicWALL Global Management System GMS 8.1 – Blind SQL Injection
Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection
Sonicwall 8.1.0.2-14sv – ‘extensionsettings.cgi’ Remote Command Injection (Metasploit)
# Exploit Title: Sonicwall extensionsettings scriptname Remote Command Injection Vulnerablity
Sonicwall 8.1.0.2-14sv – ‘viewcert.cgi’ Remote Command Injection (Metasploit)
# Exploit Title: Sonicwall viewcert.cgi CGI Remote Command Injection Vulnerablity
Netcore / Netis Routers – UDP Backdoor Access
#!/usr/bin/python
TP-LINK TD-W8151N – Denial of Service
# Exploit Title: TP-LINK TD-W8151N - Denial of Service
ARG-W4 ADSL Router – Multiple Vulnerabilities
# Exploit Title: ARG-W4 ADSL Router - Multiple Vulnerabilities
Netgear R7000 – Cross-Site Scripting
# Exploit Title: Netgear R7000 - XSS via. DHCP hostname