D-Link DIR-823G - EXCU_SHELL RCE Detection (CVE-2023-26613)

D-Link DIR-823G processes HTTP headers Command1/Confirm1 on /EXCUSHELL, allowing unauthenticated OS command execution CVE-2023-26613. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL command injection CVE-2023-26613.""" import re from kittysploit import from...

D-Link DIR-823G - EXCU_SHELL Command Injection (CVE-2023-26613)

Exploits unauthenticated OS command injection on D-Link DIR-823G via /EXCUSHELL headers Command1/Confirm1. Command output is returned in the HTTP response; opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-823G EXCUSHELL unauthenticated RCE CVE-2023-266...