# CVE-2022-32548-batch

malicious crafted base64 into a http post request to trigger the vulnerablity

poc and script for draytek vigor rce exploit

the script is written in python for mass expoitation(batch) supoorts list of ips
and fully automated the process.
all instructions are inside
also incuded the (wlogin.cgi) file if you want analyse the vulnerable code
The whole instructions are inside the zip, already included ip ranges for mass adding.
You can add your own ip list via (-f) arg in

payload for bots(just add your bin url)
1 million devices according to shodan exposed
300k easily can get

fair price: