-
Notifications
You must be signed in to change notification settings - Fork 13.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add http login scanner for Onion Omega2 devices #11661
Conversation
It looks like this is: https://onion.io/store/omega2-starter-bundle/ |
Yes, the device is correct.
A quote from the docs Since it's a custom embedded OS I don't think that there is a VM for it. The login page is accessible through Omega2's Wi-Fi network. |
Please send a PCAP of the module running to msfdev [at] metasploit.com. |
Co-Authored-By: nsa <mustafa@calap.co>
@jrobles-r7 The PCAP file is sent. |
Apologies for the delay. Thanks for sending the PCAP over and contributing. |
Release NotesThe onion_omega2_login auxiliary module performs login brute-forcing of Onion Omega2 devices. |
The onion_omega2_login module is used to brute-force credentials for Onion Omage2 devices.
Vulnerable Application
Verification Steps
msfconsole
use auxiliary/scanner/http/onion_omega2_login
set RHOSTS 192.168.3.1
set USERPASS_FILE <user pass dictionary>
run
Sample userpass file:
Scenario