module

D-Link DIR615h OS Command Injection

Try Surface Command
Back to search
Disclosed
Feb 7, 2013
Created
May 30, 2018

Description

Some D-Link Routers are vulnerable to an authenticated OS command injection on
their web interface, where default credentials are admin/admin or admin/password.
Since it is a blind os command injection vulnerability, there is no output for the
executed command when using the cmd generic payload. This module was tested against
a DIR-615 hardware revision H1 - firmware version 8.04. A ping command against a
controlled system could be used for testing purposes. The exploit uses the wget
client from the device to convert the command injection into an arbitrary payload
execution.

Authors

Michael Messner [email protected]
juan vazquez [email protected]

Platform

Linux,Unix

Architectures

cmd, mipsle

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use exploit/linux/http/dlink_dir615_up_exec
    msf exploit(dlink_dir615_up_exec) > show targets
        ...targets...
    msf exploit(dlink_dir615_up_exec) > set TARGET < target-id >
    msf exploit(dlink_dir615_up_exec) > show options
        ...show and set options...
    msf exploit(dlink_dir615_up_exec) > exploit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today