CVE-2018-10562 PoC — Dasan GPON家庭路由器命令注入漏洞

Source

Associated Vulnerability

Description

Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.

Readme

# PINGPON EXPLOIT

* Author: [@037](https://twitter.com/037)

Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw (CVE-2018-10562). 

## DISCLAIMER

I am NOT responsible for any damages caused or any crimes committed by using this tool. 

Original Script: [github.com/f3d0x0/GPON](https://github.com/f3d0x0/GPON)

### Prerequisites

You're required to install Python 3.x

```
apt-get install python3
```

You also require to have the Shodan and Request modules installed
```
pip install shodan
```
```
pip install requests
```


### Using Shodan API

This tool requires you to own an upgraded Shodan API

You may obtain one for free in [Shodan](https://shodan.io/) if you sign up using a .edu email

![alt text](https://raw.githubusercontent.com/649/Pingpon-Exploit/master/1.png)
![alt text](https://raw.githubusercontent.com/649/Pingpon-Exploit/master/2.png)

File Snapshot

 [4.0K]  /data/pocs/1b1246fec6d5bfee80b15e96224eff1f12432d7b
├── [ 16K]  1.png
├── [ 10K]  2.png
├── [3.7K]  Pingpon.py
└── [ 972]  README.md

0 directories, 4 files

Remarks