Test detection of netgear DGN command injection

mepley1 · Jan 5, 2025 · ab6e098 · ab6e098
1 parent 1664027
commit ab6e098
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/test/netgear.py b/test/netgear.py
@@ -0,0 +1,13 @@
+#!/usr/bin/env python3
+# Test detection of Netgear DGN command injection
+
+import requests
+
+url = 'http://localhost:5000/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=cat+/www/.htpasswd&curpath=/&currentsetting.htm=1'
+url_short = 'http://localhost:5000/setup.cgi?currentsetting.htm=1'
+
+# Both requests should be reported.
+x = requests.get(url)
+y = requests.get(url_short)
+print(x.status_code)
+print(y.status_code)