CVE-2022-31898

This is a functional exploit PoC for CVE-2022-31898, an authenticated command injection vulnerability in GL-iNet routers running firmware below 3.215. It leverages the ping functionality to execute arbitrary commands, resulting in a reverse shell.

This repository contains a functional Python exploit for CVE-2022-31898, an authenticated OS command injection vulnerability in GL.iNet devices. The exploit leverages the `ping_addr` parameter in the diagnostic API to execute arbitrary commands via shell metacharacters, demonstrating a reverse shell payload.