[[[STEP]]]
[[[DEFINE user="admin" md5pass="INSERT YOUR HASH HERE"/]]]
[[[REQUEST]]]
GET /login.htm? HTTP/1.1
Host: %%%routerip%%%
Connection: keep-alive
[[[/REQUEST]]]
[[[RESPONSE keys="chl"]]]
\<input type\=\"hidden\" name\=\"challenge\" value\=\"(.*?)\"\>
[[[/RESPONSE]]]
[[[/STEP]]]
[[[STEP]]]
[[[REQUEST]]]
POST /php/space/md5-generatoren.php? HTTP/1.1
Host: www.php-space.info
test=1&code=%user%:%md5pass%:%chl%
[[[/REQUEST]]]
[[[RESPONSE keys="rsp"]]]
Ausgabe der md5\(\) verschlüsselung\:\<br\>\<br\>\<br\>\<b\>(.*?)\<\/b\>\<br\>\<br\>\<br\>
[[[/RESPONSE]]]
[[[/STEP]]]
[[[STEP]]]
[[[REQUEST]]]
POST /login.tri? HTTP/1.1
Host: %%%routerip%%%
Connection: keep-alive
password=&username=%user%&challenge=&response=%rsp%
[[[/REQUEST]]]
[[[/STEP]]]
[[[STEP]]]
[[[REQUEST]]]
GET /conninfo.htm? HTTP/1.1
Host: %%%routerip%%%
Referer: http://%%%routerip%%%/login.tri
Connection: keep-alive
[[[/REQUEST]]]
[[[/STEP]]]
[[[STEP]]]
[[[REQUEST]]]
POST /lineconn.tri HTTP/1.1
Host: %%%routerip%%%
Referer: http://%%%routerip%%%/conninfo.htm
Connection: keep-alive
wanId=1&Submit=Disconnect REQUEST]
[[[/STEP]]]
[[[STEP]]]
[[[WAIT seconds="3"/]]]
[[[REQUEST]]]
GET /conninfo.htm? HTTP/1.1
Host: %%%routerip%%%
Referer: http://%%%routerip%%%/lineconn.tri
Connection: keep-alive
[[[/REQUEST]]]
[[[/STEP]]]
[[[STEP]]]
[[[REQUEST]]]
POST /lineconn.tri HTTP/1.1
Host: %%%routerip%%%
Referer: http://%%%routerip%%%/conninfo.tri
Connection: keep-alive
wanId=1&Submit=Connect REQUEST]
[[[/STEP]]]
HSRC]