Skip to content

An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

Notifications You must be signed in to change notification settings

Chocapikk/CVE-2024-29269

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

🚀 CVE-2024-29269 Exploit

This repository contains an exploit for the CVE-2024-29269 vulnerability, which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers.

✨ Features

  • 🔄 Interactive mode to execute commands interactively on a single URL.
  • 📂 Batch mode to scan multiple URLs from a file.
  • 📝 Output results to a file.
  • 📊 Progress bar to track the progress of batch scanning.

📦 Installation

Install Requirements

Clone the repository and install the required packages using pip:

git clone https://github.com/Chocapikk/CVE-2024-29269
cd CVE-2024-29269
pip install -r requirements.txt

🔍 Usage

Interactive Mode

Execute commands interactively on a single URL:

python exploit.py -u http://example.com

Batch Mode

Scan multiple URLs from a file:

python exploit.py -f urls.txt -t 50 -o results.txt

🌐 Dork

Use the following ZoomEye dork to find potentially vulnerable devices:

title:"Login to TLR-2005KSH"

LeakIX Search Results

Example Results

ZoomEye Search Results

Example Results

⚠️ Disclaimer

This tool is intended for educational purposes only. Use it at your own risk and only on systems you have permission to test. Unauthorized access to computer systems is illegal.

About

An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages