Share
## https://sploitus.com/exploit?id=AB4C913A-618A-50AB-A504-C983D6F0263B
# Tell Me Root (Batch Scanning Tool for the CVE-2026-24061 Telnet Authentication Bypass)

This is a **super‑lightweight** Python tool that lets you scan a list of hosts for the CVE‑2026‑24061 vulnerability and automatically exploit it.

**⚠️ This project is strictly for security research and testing. Do NOT use it on systems you do not own or have explicit permission to test.**

---

## 🚀 Features

- **Batch processing** – Import a list of target IPs from a text file (`ip_list.txt` by default).
- **Smart pre‑check** – A socket connection is attempted first to confirm that the target is reachable before launching the Telnet client.
- **Automatic payload injection** – Built‑in payloads are tried automatically to gain access to the target machine. The shell is handed over to you in the current terminal.
- **Real‑time progress** – The script prints a clear progress bar, e.g. `### Progress: 3/10 ###`.
- **Error handling** – Hosts that timeout, refuse the connection or are unreachable are skipped automatically, so the rest of the scan continues uninterrupted.

## 📖 Getting Started

### 1. Prepare the target list

Create a file named `ip_list.txt` in the same directory as the script (or supply a custom file name on the command line).  
Each line contains a single IP address, optionally followed by a port separated by a colon.  
Lines starting with `#` are treated as comments.

```text
192.168.1.1
192.168.1.102
192.168.1.103:8888
# 10.0.0.5 (not scanned)
```

### 2. Environment Requirements

- **Python 3.8+**
- The tool is designed to run on Kali Linux, but it works on any Linux distribution that has Python and the `pexpect` package.

```bash
sudo apt update
sudo apt install python3-pexpect
sudo pip install -r requirements.txt
```

### 3. Run the script

```bash
python exploit.py
# or
python3 exploit.py
# or supply a custom list file
python exploit.py --file my_targets.txt
# or
python3 exploit.py --file my_targets.txt

```

The output will look similar to:

```
[*] Checking connectivity to 192.168.1.1:23...
[+] Connection successful!
>>> Enter interactive mode! (Type 'exit' to quit)