CVE-2017-12943

This exploit demonstrates an authentication bypass via absolute path traversal in D-Link DIR-600 routers (firmware 2.01). By appending a specific payload to the URL, an attacker can read the admin password from the httpasswd file.

This repository contains a README file describing an authentication bypass vulnerability (CVE-2017-12943) in D-Link DIR-600 modems. The writeup is in Arabic and explains how to exploit the flaw to gain unauthorized access without a password.