编译并运行Exploit-DB代码

Question

I found this exploit on exploit-db, and it matches my router version. I'm somewhat a n00b, and I wanted to know if anyone knew how to use this exploit to exploit a router. Or rather, how to compile and execute this exploit.

I've done an exhaustive search, and still couldn't find a way.

http://www.exploit-db.com/exploits/35325/

Thanks. PS- This language, is I'm not wrong, is javascript right? So how do I compile and run this exploit?

Answer 1

These are just HTTP GET methods : The router seems to suffer from remote directory traversal (you're not supposed to access parent directories from a URL, using ../ ).

You can do that with anything that can do HTTP requests (browsers, tools, most programming languages, etc.). In the "exploit", Mozilla Firefox browser was used. Just go to this URL, it's simple as that!

Answer 2

This exploit is 12 years old, and I would be suprised if it still wouldn't be fixed. Also the list DOESN'T contain ANY javascript , and doesn't tell you the exact way to exploit the weakness, however you can read description as it says:

The router suffers from an authenticated file inclusion vulnerability (LFI) when input passed thru the 'getpage' parameter to 'webproc' script is not properly verified before being used to include files. This can be exploited to include files from local resources with directory traversal attacks.