API tools faq
paste
CyberSecurityNEPAL

iball router exploit html

CyberSecurityNEPAL
Aug 13th, 2016
324
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 4.69 KB | None | 0 0
raw download clone embed print report
  1.  
  2. <html>
  3.    <head>
  4.       <meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>
  5.       <link rel="stylesheet" href='stylemain.css' type='text/css'>
  6.          <link rel="stylesheet" href='colors.css' type='text/css'>
  7.             <script language="javascript" src="util.js"></script>
  8.             <script language="javascript">
  9. <!-- hide
  10.  
  11. pwdAdmin = 'admin';
  12. pwdSupport = 'support';
  13. pwdUser = 'user';
  14.  
  15. function btnApply() {
  16.   var loc = 'password.cgi?';
  17.   var passwordEndTag = 'useless';
  18.  
  19.   with ( document.forms[0] ) {
  20.      var idx = userName.selectedIndex;
  21.      switch ( idx ) {
  22.         case 0:
  23.            alert("No username is selected.");
  24.            return;
  25.         case 1:
  26.            if ( pwdOld.value == pwdAdmin )
  27.               break;
  28.            else {
  29.               alert("Old admin password is wrong.");
  30.               return;
  31.            }
  32.         case 2:
  33.            if ( pwdOld.value == pwdSupport )
  34.               break;
  35.            else {
  36.               alert("Old support password is wrong.");
  37.               return;
  38.            }
  39.         case 3:
  40.            if ( pwdOld.value == pwdUser )
  41.               break;
  42.            else {
  43.               alert("Old user password is wrong.");
  44.               return;
  45.            }
  46.      }
  47.  
  48.      if ( pwdNew.value != pwdCfm.value ) {
  49.         alert("The passwords do not match.");
  50.         return;
  51.      }
  52.  
  53.      var str = new String();
  54.      str = pwdNew.value;
  55.      if ( str.length > 16 ) {
  56.         alert('Password should not be longer than 16 characters.');
  57.         return;
  58.      }
  59.      if ( str.indexOf(' ') != -1 ) {
  60.         alert('Password cannot contain a space.');
  61.         return;
  62.      }
  63.  
  64.      switch ( idx ) {
  65.         case 2:
  66.            loc += 'sptPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  67.            break;
  68.         case 3:
  69.            loc += 'usrPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  70.            break;
  71.         default:
  72.            loc += 'sysPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  73.            break;
  74.      }
  75.  
  76.       /* Add by Wu Yanhong, 24Feb2010
  77.        * Avoid non-ISO-8859-1 character.
  78.        */
  79.       for ( i = 0; i < pwdNew.value.length; i++ )
  80.       {
  81.          if (pwdNew.value.substring(i,i+1).charCodeAt(0) >= 255)
  82.          {
  83.             return ;
  84.          }
  85.       }
  86.       /* Add end */
  87.  
  88.      var code = 'location="' + loc + '"';
  89.      eval(code);
  90.   }
  91. }
  92.  
  93. // done hiding -->
  94. </script>
  95.    </head>
  96.    <body>
  97.       <blockquote>
  98.          <form>
  99.             <b>Access Control -- Password</b><br><br>
  100.             Access to your DSL router is controlled through three user accounts: admin,
  101.             support, and user.<br><br>
  102.             The user name "admin" has unrestricted access to change and view configuration of
  103.             your DSL Router.<br><br>
  104.             The user name "support" is used to allow an ISP technician to access your
  105.             DSL Router for maintenance and to run diagnostics.<br><br>
  106.             The user name "user" can access the DSL Router, view configuration settings
  107.             and statistics, as well as, update the router's software.<br><br>
  108.             Use the fields below to enter up to 16 characters
  109.             and click "Apply" to change or create password. Note: Password cannot contain a space.<br><br>
  110.             <table border="0" cellpadding="0" cellspacing="0">
  111.                <tr>
  112.                   <td width="120">Username:</td>
  113.                   <td><select name='userName' size="1">
  114.                         <option value="0">
  115.                         &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
  116.                        <option value="1">admin
  117.                        <option value="2">support
  118.                        <option value="3">user
  119.                     </select></td>
  120.               </tr>
  121.               <tr>
  122.                  <td>Old Password:</td>
  123.                  <td><input name='pwdOld' type="password" size="20"></td>
  124.               </tr>
  125.               <tr>
  126.                  <td>New Password:</td>
  127.                  <td><input name='pwdNew' type="password" size="20"></td>
  128.               </tr>
  129.               <tr>
  130.                  <td>Confirm Password:</td>
  131.                  <td><input name='pwdCfm' type='password' size="20"></td>
  132.               </tr>
  133.            </table>
  134.            <br>
  135.            <center><input type='button' onClick='btnApply()' value='Save/Apply'></center>
  136.         </form>
  137.      </blockquote>
  138.   </body>
  139. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!