rapid7/metasploit-framework — pull request #1651 by m-1-k-3 (2013-03-25 07:53:27+00:00)
Title: dlink dir 300/600 login module - initial commit

Hey guys,

the Dlink devices have a nice form based authentication to the web based management interface. Lots of such devices have weak passwords. We should check them ;)

I have used the http_login module from hdm as template and have included the dlink related stuff.

The following output is from the DIR 300 revA - same for DIR 600 revD:

Exploiting Demo - 192.168.178.105 / 0 auxiliary(dlink_dir_300_615_http_login) > run

[*] Attempting to login to http://192.168.178.150:80/login.php
[*] 192.168.178.150:80 DLINK_DIR_300_615_HTTP - [1/2] - /login.php - Trying username:'admin' with password:''
[-] 192.168.178.150:80 DLINK_DIR_300_615_HTTP - [1/2] - /login.php - Failed to login as 'admin'
[*] 192.168.178.150:80 DLINK_DIR_300_615_HTTP - [2/2] - /login.php - Trying username:'admin' with password:'admin'
[+] http://192.168.178.150:80/login.php - Successful login 'admin' : 'admin'
[*] 192.168.178.150:80 DLINK_DIR_300_615_HTTP - [2/2] - /login.php - Trying random username with password:'admin'
[*] 192.168.178.150:80 DLINK_DIR_300_615_HTTP - [2/2] - /login.php - Trying username:'admin' with random password
[*] http://192.168.178.150:80/login.php - Random usernames are not allowed.
[*] http://192.168.178.150:80/login.php - Random passwords are not allowed.
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

This is the first module of some more dlink_login modules. If this is finished I will use this one as template for the other devices.

Looking forward to your feedback.

Best,
Mike