D-Link - User-Agent Backdoor Detection (CVE-2013-6026)

Detects CVE-2013-6026 by comparing unauthorized responses with and without User-Agent xmlsetroodkcableoj28840ybtide on thttpd-alphanetworks. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link string-reversed User-Agent backdoor CVE-2013-6026.""" from kittysploit import from...

CVE-2013-6026

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlsetroodkcableoj28840ybtide...