tftp download
parent
aee5b02f65
commit
1a904ccf7d
|
@ -23,7 +23,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
Some Linksys Routers are vulnerable to an authenticated OS command injection.
|
||||
Default credentials for the web interface are admin/admin or admin/password. Since
|
||||
it is a blind os command injection vulnerability, there is no output for the
|
||||
executed command when using the cmd generic payload. A ping command against a
|
||||
executed command when using the cmd generic payload. This module was tested on a
|
||||
Linksys WRT160n version 2 - firmware version v2.0.03. A ping command against a
|
||||
controlled system could be used for testing purposes. The exploit uses the tftp
|
||||
client from the device to download the payload.
|
||||
},
|
||||
|
|
Loading…
Reference in New Issue