CVE-2024-54887 TypeScript PoC

This repository contains a TypeScript (ts-node) rewrite of the public Python PoC for CVE-2024-54887 (TP-Link TL-WR940N v3/v4 authenticated RCE).

Prerequisites

• Node.js 20+

Install

npm install

Usage

npx ts-node .\cve-2024-54887.ts --ip <router-ip>

Optional credentials:

npx ts-node .\cve-2024-54887.ts --ip <router-ip> --username <user> --password <pass>

Short flags are also available:

npx ts-node .\cve-2024-54887.ts -i <router-ip> -u <user> -p <pass>

Show help:

npx ts-node .\cve-2024-54887.ts --help

What the script does

1. Logs in to the target router with MD5-hashed password auth.
2. Extracts the authenticated session path from the login response.
3. Builds and sends the crafted Wan6to4TunnelCfgRpm.htm payload.
4. Waits briefly, then indicates where to check for the bind shell (port 4444).