emmet

You do nothing but discourage beginners from learning, my question was clear I was just learning okay and I got the answer, cgi. Why are you blocking my question for no reason

please ban me and satisfy your ego one last time

You're breaking the rules of this place just because you didn't understand the question. Keep deleting we both know who is right

You declared the question off-topic and closed it as soon as I asked it, but where the verification is done is within the scope of security and can create an attack surface, what I didn't know was that at least for the router in question, if the http server was hacked, the entire server would be compromised and you could have simply stated that instead of closing the topic, couldn't you?

Also, excuse me, I didn't know that the http server was running with root permissions, so I thought that rce was only at the server level.

By not giving a technical answer and brushing it off, you are not actually answering the question.

@schroeder No, your view is very narrow because this question assumes that there is a vulnerability that only affects the http server.

For example, you found an rce on the web server and this rce allows code execution for the http server, so you can send yourself a variable that holds the hashed username and password, but if the authentication is done by a low-level system API and someone who has access to the web server cannot access the permissions of this API, then it is difficult to obtain the password. Sorry, although the question seems very general, I think most home tplink modems use a similar technology. What I mean is, is the cgi performing the authentication or is the web server doing this independently of the cgi?

If the verification is done on the web server, the modem can be compromised if the server is hacked, but if the verification is done by a low-level API, then the attacker cannot bypass the verification even if the web server is hacked.

now, i am trying reinstall debian, if got any same error i will try things in here

i broke the whole system because of a kernel error and deleted the virtual machine. But before that, when i reinstalled gnome, it was fixed, sometimes it would fix itself, sometimes it would go back. But it didn't matter anymore because I deleted the virtual machine

so, what should i do

wait i find this ``` m@any:~/ev/fluxion-master$ cat fluxion.sh | grep xterm echo -e "\\033[31mAborted, xterm test session failed.\\033[0m"; exit 4 "php-cgi" "xterm" "rfkill" "unzip" "route:net-tools" # sleep 30 && killall xterm & if ! xterm -title "$FLUXIONScannerHeader" $TOPLEFTBIG \ m@any:~/ev/fluxion-master$ ```

github.com/FluxionNetwork/fluxion

it is fluxion 6.12

i am not using xterm actually. another program have to use xterm and i cant change this, all logs shows in xterm