CVE-2018-11714

This exploit demonstrates an authentication bypass vulnerability in TP-Link routers (TL-WR840N and TL-WR841N) by manipulating the Referer header to access sensitive endpoints without authentication. It includes examples for downloading configuration files, enabling port forwarding, rebooting the router, and modifying WiFi settings.

This PoC exploits an authentication bypass vulnerability in TP-Link TL-WR840N routers by sending a crafted Referer header to download the configuration file. It then decrypts the configuration file using OpenSSL with a hardcoded DES-ECB key.

This repository contains a functional exploit for CVE-2018-12633, an authentication bypass vulnerability in TP-Link TL-WR840N routers. The exploit manipulates the HTTP Referer header to bypass authentication and dump the router's configuration file, which can then be decrypted using the provided Python script.