CVE-2020-8515

This exploit leverages an unauthenticated command injection vulnerability in DrayTek routers via the 'keyPath' parameter in the '/cgi-bin/mainfunction.cgi' endpoint. It constructs a malicious payload to execute arbitrary commands by bypassing input sanitization using ${IFS} for space substitution.

This repository contains a functional exploit PoC for CVE-2020-8515, a command execution vulnerability in DrayTek Vigor routers. The exploit leverages a command injection flaw in the 'mainfunction.cgi' endpoint by manipulating the 'keyPath' parameter.

This repository contains a functional Python exploit for CVE-2020-8515, a command injection vulnerability in Draytek Vigor routers. The exploit demonstrates remote code execution (RCE) by injecting commands into the 'keyPath' parameter of the login endpoint, with the injected command executed twice due to the vulnerability's behavior.

This repository contains an Nmap script designed to detect CVE-2020-8515, a remote code execution vulnerability affecting Draytek devices. The script is likely used for scanning and identifying vulnerable systems rather than exploiting them.