Really, Actiontec?

Monday, October 29, 2012.

From a Verizon-branded Actiontec DSL router. Look for adminPassword in the javascript below

$ printf "GET / HTTP/1.1\r\n\r\n" | nc 80

HTTP/1.1 200 Ok
Server: micro_httpd
Cache-Control: no-cache
Date: Mon, 29 Oct 2012 17:50:28 GMT
Content-Type: text/html
Connection: close

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<script language="JavaScript" src="js/nav.js"></script>
<script language="Javascript">

var adminPassword = "abc123";
function do_load(){

        if(adminPassword == "abc123")

<body onload="do_load()">
<form  name="myform">

Posted by Alan on Monday, October 29, 2012. (Discuss)

blog comments powered by Disqus

"After a little while I became possessed with the keenest curiosity about the whirl itself. I positively felt a wish to explore its depths, even at the sacrifice I was going to make; and my principal grief was that I should never be able to tell my old companions on shore about the mysteries I should see."

Illustration for Edgar Allan Poe's story "Descent into the Maelstrom" by Harry Clarke, published in 1919.