daily pastebin goal
46%
SHARE
TWEET

iball router exploit html

CyberSecurityNEPAL Aug 13th, 2016 44 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2. <html>
  3.    <head>
  4.       <meta HTTP-EQUIV='Pragma' CONTENT='no-cache'>
  5.       <link rel="stylesheet" href='stylemain.css' type='text/css'>
  6.          <link rel="stylesheet" href='colors.css' type='text/css'>
  7.             <script language="javascript" src="util.js"></script>
  8.             <script language="javascript">
  9. <!-- hide
  10.  
  11. pwdAdmin = 'admin';
  12. pwdSupport = 'support';
  13. pwdUser = 'user';
  14.  
  15. function btnApply() {
  16.   var loc = 'password.cgi?';
  17.   var passwordEndTag = 'useless';
  18.  
  19.   with ( document.forms[0] ) {
  20.      var idx = userName.selectedIndex;
  21.      switch ( idx ) {
  22.         case 0:
  23.            alert("No username is selected.");
  24.            return;
  25.         case 1:
  26.            if ( pwdOld.value == pwdAdmin )
  27.               break;
  28.            else {
  29.               alert("Old admin password is wrong.");
  30.               return;
  31.            }
  32.         case 2:
  33.            if ( pwdOld.value == pwdSupport )
  34.               break;
  35.            else {
  36.               alert("Old support password is wrong.");
  37.               return;
  38.            }
  39.         case 3:
  40.            if ( pwdOld.value == pwdUser )
  41.               break;
  42.            else {
  43.               alert("Old user password is wrong.");
  44.               return;
  45.            }
  46.      }
  47.  
  48.      if ( pwdNew.value != pwdCfm.value ) {
  49.         alert("The passwords do not match.");
  50.         return;
  51.      }
  52.  
  53.      var str = new String();
  54.      str = pwdNew.value;
  55.      if ( str.length > 16 ) {
  56.         alert('Password should not be longer than 16 characters.');
  57.         return;
  58.      }
  59.      if ( str.indexOf(' ') != -1 ) {
  60.         alert('Password cannot contain a space.');
  61.         return;
  62.      }
  63.  
  64.      switch ( idx ) {
  65.         case 2:
  66.            loc += 'sptPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  67.            break;
  68.         case 3:
  69.            loc += 'usrPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  70.            break;
  71.         default:
  72.            loc += 'sysPassword=' + encodeUrl(pwdNew.value) + '&passwordEndTag=' + passwordEndTag;
  73.            break;
  74.      }
  75.  
  76.       /* Add by Wu Yanhong, 24Feb2010
  77.        * Avoid non-ISO-8859-1 character.
  78.        */
  79.       for ( i = 0; i < pwdNew.value.length; i++ )
  80.       {
  81.          if (pwdNew.value.substring(i,i+1).charCodeAt(0) >= 255)
  82.          {
  83.             return ;
  84.          }
  85.       }
  86.       /* Add end */
  87.  
  88.      var code = 'location="' + loc + '"';
  89.      eval(code);
  90.   }
  91. }
  92.  
  93. // done hiding -->
  94. </script>
  95.    </head>
  96.    <body>
  97.       <blockquote>
  98.          <form>
  99.             <b>Access Control -- Password</b><br><br>
  100.             Access to your DSL router is controlled through three user accounts: admin,
  101.             support, and user.<br><br>
  102.             The user name "admin" has unrestricted access to change and view configuration of
  103.             your DSL Router.<br><br>
  104.             The user name "support" is used to allow an ISP technician to access your
  105.             DSL Router for maintenance and to run diagnostics.<br><br>
  106.             The user name "user" can access the DSL Router, view configuration settings
  107.             and statistics, as well as, update the router's software.<br><br>
  108.             Use the fields below to enter up to 16 characters
  109.             and click "Apply" to change or create password. Note: Password cannot contain a space.<br><br>
  110.             <table border="0" cellpadding="0" cellspacing="0">
  111.                <tr>
  112.                   <td width="120">Username:</td>
  113.                   <td><select name='userName' size="1">
  114.                         <option value="0">
  115.                         &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
  116.                        <option value="1">admin
  117.                        <option value="2">support
  118.                        <option value="3">user
  119.                     </select></td>
  120.               </tr>
  121.               <tr>
  122.                  <td>Old Password:</td>
  123.                  <td><input name='pwdOld' type="password" size="20"></td>
  124.               </tr>
  125.               <tr>
  126.                  <td>New Password:</td>
  127.                  <td><input name='pwdNew' type="password" size="20"></td>
  128.               </tr>
  129.               <tr>
  130.                  <td>Confirm Password:</td>
  131.                  <td><input name='pwdCfm' type='password' size="20"></td>
  132.               </tr>
  133.            </table>
  134.            <br>
  135.            <center><input type='button' onClick='btnApply()' value='Save/Apply'></center>
  136.         </form>
  137.      </blockquote>
  138.   </body>
  139. </html>
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top