Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2024-29269 PoC — Telesquare TLR-2005Ksh 安全漏洞

Source
Associated Vulnerability
Title:Telesquare TLR-2005Ksh 安全漏洞 (CVE-2024-29269)
Description:Telesquare TLR-2005Ksh是韩国Telesquare公司的一款无线路由器。 Telesquare TLR-2005Ksh 1.0.0版本和1.1.4版本存在安全漏洞,该漏洞源于允许攻击者通过Cmd参数运行任意系统命令。
Readme
# 🚀 CVE-2024-29269 Exploit

This repository contains an exploit for the CVE-2024-29269 vulnerability, which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers.

## ✨ Features

- 🔄 Interactive mode to execute commands interactively on a single URL.
- 📂 Batch mode to scan multiple URLs from a file.
- 📝 Output results to a file.
- 📊 Progress bar to track the progress of batch scanning.

## 📦 Installation

### Install Requirements

Clone the repository and install the required packages using `pip`:

```bash
git clone https://github.com/hack-with-rohit/CVE-2024-29269-RCE
cd CVE-2024-29269-RCE
pip install -r requirements.txt
```

## 🔍 Usage

### Interactive Mode

Execute commands interactively on a single URL:

```bash
python exploit.py -u http://example.com
```

### Batch Mode

Scan multiple URLs from a file:

```bash
python exploit.py -f urls.txt -t 50 -o results.txt
```

## 🌐 Dork

Use the following ZoomEye dork to find potentially vulnerable devices:

```text
title:"Login to TLR-2005KSH"
```



## ⚠️ Disclaimer

This tool is intended for educational purposes only. Use it at your own risk and only on systems you have permission to test. Unauthorized access to computer systems is illegal.
File Snapshot

[4.0K] /data/pocs/87db4e9f856b886bcc7b2d0c90ccbff351c352cb ├── [6.8K] exploit.py ├── [1.3K] README.md └── [ 80] requirements.txt 0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.