CVE-2020-35391

This exploit targets CVE-2020-35391, an information disclosure vulnerability in Tenda N300 F3 routers. It sends a malformed HTTP request to download the router's configuration file, which contains the admin password in base64-encoded format. The script decodes and extracts the password, then saves the configuration and credentials to files.

This repository contains a functional Python script that exploits CVE-2020-35391, an unauthenticated file download vulnerability in Tenda F3 routers (v3/v4). The exploit allows downloading sensitive files such as configuration, system logs, and flash dumps, and extracts admin credentials from the configuration file.

The repository contains a functional Python exploit for CVE-2020-35391, targeting Tenda F3 routers. It leverages malformed HTTP headers to bypass authentication and dump configuration files, including credentials.

This repository contains a functional Python PoC for CVE-2020-35391, an authentication bypass vulnerability in Tenda N300 routers. The exploit sends a malformed HTTP request to retrieve sensitive configuration data, including the base64-encoded password, from the router's configuration file.