CVE-2014-8244 PoC — Cisco Linksys SMART WiFi固件信息泄露漏洞

来源

关联漏洞

Description

Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244

介绍

# LinksysLeaks
Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244

This script was created to help me find vulnerable smart wifi devices that leak sensitive information,known as CVE-2014-8244.
You have the option to either scan a single ip or a text file with multiple IPs. optional arguements includes port to scan, timeout, save found devices to a text file, and check admin password.

At the moment the script only checks if it finds a device and if its default password "admin" is in use. Other leak functions and arguements will be added later.(Device info such as fw date/version, connected devices, DDNS status, and more)

I created this for educational purposes so please keep it that way when you use it, only test on your network or a network you have permission to test on.


Usage:
  single IP - python3 main.py --target 10.0.0.1
  
  file IPs - python3 main.py --file fileName.txt

文件快照

 [4.0K]  /data/pocs/b0e8730a2b906d1b0ff7baabcdb1d0499997ee2f
├── [6.7K]  deviceleaks.py
├── [1.8K]  main.py
├── [ 934]  README.md
├── [  99]  requirements.txt
└── [ 586]  setArgs.py

0 directories, 5 files

备注