CVE-2015-5995

This exploit demonstrates an authentication bypass vulnerability in Tenda N3 Wireless N150 routers by forging a static cookie value. The router uses a predictable cookie for authentication, allowing unauthorized access to the admin account without credentials.

This PoC exploits CVE-2015-5995, an authentication bypass vulnerability in Tenda and Medialink routers, by sending a crafted HTTP request with an 'admin' substring in the Cookie header to extract administrative and WiFi passwords from the router's configuration file.