Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-29269 PoC — Telesquare TLR-2005Ksh 安全漏洞

Source
Associated Vulnerability
Title:Telesquare TLR-2005Ksh 安全漏洞 (CVE-2024-29269)
Description:An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.
Readme
# 🚀 CVE-2024-29269 Exploit

This repository contains an exploit for the CVE-2024-29269 vulnerability, which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers.

## ✨ Features

- 🔄 Interactive mode to execute commands interactively on a single URL.
- 📂 Batch mode to scan multiple URLs from a file.
- 📝 Output results to a file.
- 📊 Progress bar to track the progress of batch scanning.

## 📦 Installation

### Install Requirements

Clone the repository and install the required packages using `pip`:

```bash
git clone https://github.com/hack-with-rohit/CVE-2024-29269-RCE
cd CVE-2024-29269-RCE
pip install -r requirements.txt
```

## 🔍 Usage

### Interactive Mode

Execute commands interactively on a single URL:

```bash
python exploit.py -u http://example.com
```

### Batch Mode

Scan multiple URLs from a file:

```bash
python exploit.py -f urls.txt -t 50 -o results.txt
```

## 🌐 Dork

Use the following ZoomEye dork to find potentially vulnerable devices:

```text
title:"Login to TLR-2005KSH"
```



## ⚠️ Disclaimer

This tool is intended for educational purposes only. Use it at your own risk and only on systems you have permission to test. Unauthorized access to computer systems is illegal.
File Snapshot

[4.0K] /data/pocs/87db4e9f856b886bcc7b2d0c90ccbff351c352cb ├── [6.8K] exploit.py ├── [1.3K] README.md └── [ 80] requirements.txt 0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →