CVE-2022-27226

This exploit demonstrates a CSRF to RCE vulnerability in iRZ Mobile Routers. It allows an attacker to execute arbitrary commands via a crafted crontab entry, leading to a reverse shell. The exploit includes both post-authentication and CSRF-based attack vectors.

This repository contains a functional exploit for CVE-2022-27226, which leverages a CSRF vulnerability in iRZ Mobile Routers to achieve remote code execution via cronjob manipulation. The exploit supports both authenticated and unauthenticated attack vectors, with detailed instructions for achieving a reverse shell.