10
/ 10
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
## CVE-2025-8730 – Authentication Bypass in Belkin F9K1009/F9K1010
**Author : Byte Reaper**
## Description :
This repository contains a exploit for CVE‑2025‑8730, a critical Authentication Bypass vulnerability affecting the web interface of Belkin F9K1009 and F9K1010 routers.
The flaw lies in the session validation logic of the /login.htm file, where improperly handled cookies or crafted requests allow attackers to bypass login checks and gain full access to the administrative interface without valid credentials.
This vulnerability enables remote attackers (with network access) to:
Access sensitive configuration data
Modify router settings
Deploy further payloads for persistence or lateral movement
## References :
NVD Entry: https://nvd.nist.gov/vuln/detail/CVE-2025-8730
## Usage :
```
gcc exploit.c argparse.c -o CVE-2025-8730 -lcurl
./CVE-2025-8730 -i 192.168.1.1
Verbose Mode :
./CVE-2025-8730 -i 192.168.1.1 -v -c [cookie file]
Full URl :
./CVE-2025-8730 -f http:///
Sleep (second):
./CVE-2025-8730 -i 192.168.1.1 -s 1
Number Request (For loop), example 10 Request POST :
./CVE-2025-8730 -i 192.168.1.1 -k 10 -s 1 -v
```
License :
MIT License
**Author : Byte Reaper**
## Description :
This repository contains a exploit for CVE‑2025‑8730, a critical Authentication Bypass vulnerability affecting the web interface of Belkin F9K1009 and F9K1010 routers.
The flaw lies in the session validation logic of the /login.htm file, where improperly handled cookies or crafted requests allow attackers to bypass login checks and gain full access to the administrative interface without valid credentials.
This vulnerability enables remote attackers (with network access) to:
Access sensitive configuration data
Modify router settings
Deploy further payloads for persistence or lateral movement
## References :
NVD Entry: https://nvd.nist.gov/vuln/detail/CVE-2025-8730
## Usage :
```
gcc exploit.c argparse.c -o CVE-2025-8730 -lcurl
./CVE-2025-8730 -i 192.168.1.1
Verbose Mode :
./CVE-2025-8730 -i 192.168.1.1 -v -c [cookie file]
Full URl :
./CVE-2025-8730 -f http:///
Sleep (second):
./CVE-2025-8730 -i 192.168.1.1 -s 1
Number Request (For loop), example 10 Request POST :
./CVE-2025-8730 -i 192.168.1.1 -k 10 -s 1 -v
```
License :
MIT License
Basic Information
ID
79E3F600-6C9A-5FC3-BA6A-B5ED7F5A6507
Published
Aug 8, 2025 at 21:12
Modified
Aug 8, 2025 at 21:37