CVE-2018-12705 : Digisol Wireless Router DG-BR4000NG XSS Proof of Concept

This is my first CVE. I found that specified router is vulnerable to Cross-Site Scripting. This vulnerability is still a zero day, today being 24th of June 2018. To exploit the vulnerability, the following steps were taken.

Step 1: 

Connect to the Wifi network and open the Gateway. I did it by opening 192.168.2.1 .




Step 2:

Press General Setup and change the SSID to something else that can be accepted. I set it as "testing".



Step 3:

Open BurpSuite and the change the proxy settings of the internet browser so that Burp can intercept the data. After that hit apply on the Digisol page that is already open.

Step 4:

Now Burp will intercept the data, and now just change the SSID parameter form "testing" to "<script>alert("ADIPTA")</script> and then forward the intercept.

Now everything is done. Now after the page reloads after you join the newly named Wifi network, you will find that you will have a stored XSS as soon as you open General and then Basic Setup. The outcome will look like:




Comments

  1. Thanks for sharing this great information about detail, i shared this information to my all friends on social media platform because this info helps to everyone.

    How to Set Up a Linksys Range Extender
    Linksys Extender Re1000
    Linksys Smart Wifi Setup Not Working
    How to re-configure a Linksys Extender
    httpextender linksys com
    linksys initial setup

    ReplyDelete
  2. when a client purchases the Netgear Router, they are additionally ensured amazingly predominant nature of specialized help gave viably by our Netgear Troubleshooting group. If you need Negear Nighthawk Router Setup then you can visit us.

    ReplyDelete
  3. Tec-blogs.com consecutively publish self-help articles on all routers, extenders,
    modems and other networking devices. Our articles attune with quality and layman
    language to support non-technical people to resolve the technical issues on their own.
    We do have a Technical support team to assist you in any case when you are eluded by the issue.

    ReplyDelete
  4. Advaita yoga studio is one of the most reportable yoga studios in Chandigarh sector 38. you can get different sessions and therapies to enhance your spiritual, professional and personal life.

    ReplyDelete
  5. Thanks for sharing useful information...We all usually choose the WPS option to setup wi-fi range extenders. Well, no problem as such but at times your Netgear extender not working all of a sudden. To rescue from this trouble, you can try to set up Netgear extender not working manually from the article.

    ReplyDelete
  6. Thanks for sharing a great article.Extenderlinksys-usa.com website provide self-help articles and technical support for linksys extender and routers. Call at +1-844-456-4180 toll-free phone number to fix issues associated with Linksys Extenders Setup

    ReplyDelete
  7. Need To know that How to connect with my Netgear Wifi Extender in easy steps then just get in touch with us. Our technical community will be available for you help.

    ReplyDelete
  8. Your work will bring a lot of insights into solving our next problem.
    Network services

    ReplyDelete
  9. Thank a lot for this post that was very interesting. Keep posting like those amazing posts, this is really awesome :)
    Looking for Netgear Support, visit on:
    Netgear Support UK
    Routers Support Near Me

    ReplyDelete
  10. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Spectrum App On Firestick

    ReplyDelete
  11. Cyberflix TV is one of the most popular apps among Firestick users to get unlimited hours of entertainment that suits your choice. Cyberflix Firestick

    ReplyDelete
  12. Upgrade your network from a slow speed to a fast speed. The Linksys wifi router is a combination of high performance and stability. You can set up your Linksys extender by making use of http extender linksys com You are liable to enjoy advanced wifi features after your setup is done.

    ReplyDelete
  13. If you wish to know how to print envelopes on Brother HL-2270DW Printer, then follow the simple steps mentioned here. Open your printer’s back cover and take out the two green levers. You will see these levers on the right and left of your printer. Use your hands to open the feed slot cover. Now, slide the feed paper guide according to your paper’s width. Now, place the envelope back into the manual feed slot by using both your hands. You need to ensure that the front corner is touching the paper feed roller. This will help you print envelopes on your Brother Printer.

    ReplyDelete
  14. Wi-Fi Protected Setup WPS is the smart way to without typing a password. All you need to do is press the TP-Link wifi extender setup wps as shown in the below infographics. After pressing them, they will become on or ready to use within a minute.

    ReplyDelete

  15. TP-link is one of the best Wi-Fi Extenders. It comes with the Backhaul technique. TP-link extender setup is not a difficult task if you follow the below-mentioned steps; TP-link extender setup is not a difficult task. After setting it up, you can find high performance with a better range.

    ReplyDelete
  16. Our wifi extender not working sometimes. It has many reasons such as power is not connected. You can check that all the cables are attached perfectly. There is a need to use the proper username and password of the extender for login. WIFI Extender hub helps you to solve your queries.

    ReplyDelete
  17. Users sometimes face some issues with Netgear extenders or routers. It does not connect with the device. You can take Netgear installation assistant for solutions to the issues you are facing. We easily reset or set up our extenders and use all devices quickly.

    ReplyDelete
  18. We can use the Extender Password in settings. We use it at the time of setup and login. Users can easily change the settings with an extender password. It is also effective in firmware updates in other contexts.

    ReplyDelete
  19. Your information is very helpful.For good internet experience in our home or office need a good walmart.

    ReplyDelete
  20. How to find the best Netgear modem?
    You'll need a robust and dependable WiFi router to have great WiFi! It's crucial. We are the WiFi specialists at NETGEAR. For more than two decades, NETGEAR has been developing routers. As a market leader, it has always been at the forefront of offering the most inventive and cutting-edge technological solutions to tackle WiFi connectivity issues in your house. We've pioneered and led the way for solid WiFi that powers all your gadgets in your house, whether you're binge-watching the latest Netflix series, playing Overwatch with your pals online, or safeguarding your home with Arlo security cameras and the best netgear modem router.

    ReplyDelete
  21. How to find the best Netgear Nighthawk Router?
    When you are buying any kind of router, there are a few things you need to check in order to get the best deal. Say if you need to get the Best Netgear Nighthawk Router, the main things you should look out for are speed, range, connectivity, and model. There are a number of routers that you can get from Netgear but the target is to find something that suits your work and does not have a problem in the long run. Netgear has some great models available, so do your research to get the best deal. Going through reviews of the routers available can be the first place to start.

    ReplyDelete
  22. Is your roomba not connecting to wifi ? Don't worry, we've got you covered! Learn the simple steps to fix the issue and get your Roomba up and running in no time. Say goodbye to frustrating connection problems for good!

    ReplyDelete
  23. Learn how to do Mikrotik router Login and access your network settings securely. Protect your network from cyber threats with our step-by-step guide.

    ReplyDelete

Post a Comment