CVE-2015-2797

This Metasploit module exploits a buffer overflow vulnerability in Airties routers via a maliciously crafted HTTP POST request to the login CGI with an overly long redirect parameter. It achieves remote code execution by leveraging a cmdstager to deliver a payload, targeting MIPS big-endian architectures.

This exploit targets a buffer overflow vulnerability in AIRTIES Air5650v3TT routers, delivering a reverse shell payload. It constructs a malicious HTTP request with shellcode to achieve remote code execution.

This PoC exploits a buffer overflow vulnerability in the AirTies 5650 router's login CGI by sending an excessively long redirect parameter, leading to a crash or potential code execution. The script uses chroot and qemu-mips-static to emulate the environment for testing.

This Metasploit module exploits a buffer overflow vulnerability in Airties routers via a maliciously crafted HTTP POST request to the login CGI with an overly long redirect parameter. It achieves remote code execution by overwriting the return address and leveraging ROP gadgets to call system().