Python
Need help with GPON?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.
f3d0x0

Description

Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.

205 Stars 68 Forks 17 Commits 1 Opened issues

Services available

Need anything else?

RCE on GPON home routers (CVE-2018-10561)

Press

The Hacker News - 1

The Hacker News - 2

KitPloit

Security Affairs

Vulnerability

Many routers today use GPON internet, and a way to bypass all authentication on the devices (CVE-2018-10561) was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability (CVE-2018-10562) and execute commands on the device.

At the time it was written almost ONE MILLION of these devices are exposed to the Internet, according to Shodan.

Dependencies required

requests

urllib2

Tested on

Kali Linux

Ubuntu 17.10 Server

Usage

python gpon_rce.py TARGET_URL COMMAND

e.g. ``` python gpon_rce.py http://192.168.1.15 'id'

## Screenshots

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.