{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5226","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5226/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5226/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5226/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/5226","id":70059339,"number":5226,"title":"Airties login bof module","user":{"login":"m-1-k-3","id":497520,"avatar_url":"https://avatars.githubusercontent.com/u/497520?v=3","gravatar_id":"","url":"https://api.github.com/users/m-1-k-3","html_url":"https://github.com/m-1-k-3","followers_url":"https://api.github.com/users/m-1-k-3/followers","following_url":"https://api.github.com/users/m-1-k-3/following{/other_user}","gists_url":"https://api.github.com/users/m-1-k-3/gists{/gist_id}","starred_url":"https://api.github.com/users/m-1-k-3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/m-1-k-3/subscriptions","organizations_url":"https://api.github.com/users/m-1-k-3/orgs","repos_url":"https://api.github.com/users/m-1-k-3/repos","events_url":"https://api.github.com/users/m-1-k-3/events{/privacy}","received_events_url":"https://api.github.com/users/m-1-k-3/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":{"login":"kernelsmith","id":620129,"avatar_url":"https://avatars.githubusercontent.com/u/620129?v=3","gravatar_id":"","url":"https://api.github.com/users/kernelsmith","html_url":"https://github.com/kernelsmith","followers_url":"https://api.github.com/users/kernelsmith/followers","following_url":"https://api.github.com/users/kernelsmith/following{/other_user}","gists_url":"https://api.github.com/users/kernelsmith/gists{/gist_id}","starred_url":"https://api.github.com/users/kernelsmith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kernelsmith/subscriptions","organizations_url":"https://api.github.com/users/kernelsmith/orgs","repos_url":"https://api.github.com/users/kernelsmith/repos","events_url":"https://api.github.com/users/kernelsmith/events{/privacy}","received_events_url":"https://api.github.com/users/kernelsmith/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2015-04-22T08:31:35Z","updated_at":"2015-04-28T19:40:19Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/5226","html_url":"https://github.com/rapid7/metasploit-framework/pull/5226","diff_url":"https://github.com/rapid7/metasploit-framework/pull/5226.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/5226.patch"},"body":"This is the Exploit for the Airties devices (Air6372, Air5760, Air5750, Air5650TT, Air5453, Air5444TT, Air5443, Air5442, Air5343, Air5342, Air5341, Air5021). \r\nOriginally discovered by Batuhan Burakcin here: http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/\r\n\r\n![msf-module](https://cloud.githubusercontent.com/assets/497520/7270125/f42de400-e8d9-11e4-9e7d-98253643ac6b.png)\r\n\r\nTo verify this exploit you could do it in emulation:\r\n* Use the Aurel Debian MIPS(BE) images\r\n* Download firmware here: http://airties.com/firmwares/AirTies_Air5650v3TT_FW_1.0.2.0.bin\r\n* Extract it via binwalk\r\n* Fix everything in the image: \r\n\r\nmkdir var/socks var/tmp var/run var/lib var/fyi var/asd var/cache var/log var/mnt var/unpacked\r\nrm etc/TZ\r\necho \"\" > etc/TZ\r\nmknod dev/null c 1 3\r\n\r\n* Copy the new root filesystem to your debian mips and change to the root filesystem directory of your firmware image\r\n* start the webserver: \r\n\r\nroot@debian-mips:~/airties_root#  chroot . ./sbin/httpd -f -vv -h ./webs/\r\n"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/97181544","html_url":"https://github.com/rapid7/metasploit-framework/pull/5226#issuecomment-97181544","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5226","id":97181544,"user":{"login":"kernelsmith","id":620129,"avatar_url":"https://avatars.githubusercontent.com/u/620129?v=3","gravatar_id":"","url":"https://api.github.com/users/kernelsmith","html_url":"https://github.com/kernelsmith","followers_url":"https://api.github.com/users/kernelsmith/followers","following_url":"https://api.github.com/users/kernelsmith/following{/other_user}","gists_url":"https://api.github.com/users/kernelsmith/gists{/gist_id}","starred_url":"https://api.github.com/users/kernelsmith/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kernelsmith/subscriptions","organizations_url":"https://api.github.com/users/kernelsmith/orgs","repos_url":"https://api.github.com/users/kernelsmith/repos","events_url":"https://api.github.com/users/kernelsmith/events{/privacy}","received_events_url":"https://api.github.com/users/kernelsmith/received_events","type":"User","site_admin":false},"created_at":"2015-04-28T19:40:19Z","updated_at":"2015-04-28T19:40:19Z","body":"status update: qemu debian mips environment is up"}}