craxrev

#!/usr/bin/env python3

########################################################################################################
#
# LTE CPE B2268S Router
# version: V100R001C35SP100B529
#
# Busybox Command Injection, vulnerability in the traceroute command
#
# Payload: 

craxrev

#!/usr/bin/env python3


# Imports
import os
import subprocess
import tempfile
import datetime
import sys

craxrev

Keybase proof

I hereby claim:

• I am craxrev on github.
• I am craxrev (https://keybase.io/craxrev) on keybase.
• I have a public key whose fingerprint is 678C F10B 9BFF 7A66 D217 445F C640 EE40 A835 3AC0

To claim this, I am signing this object:

craxrev

#!/bin/sh
if [ $# = 0 ] || [ $1 = -h ]; then cat <<EOF
--------------------------------------------------------------------------
Pro Backup's handy rotating-filesystem-backup utility for Padavan firmware
--------------------------------------------------------------------------
It makes rotating backup-snapshots of /opt and /etc/storage when called

Installation: curl -O https://gist.githubusercontent.com/ProBackup-nl/82fb02c67dc05ca0310d0f9f8e8be14c/raw/backup.sh && chmod 755 backup.sh && mv backup.sh /opt/usr/sbin/backup

Goals: 1. many redundant copies to defeat (flash) bit rot -> no hard links (yet)