Back to Metasploit Framework

Advantech Webaccess Login

documentation/modules/auxiliary/scanner/http/advantech_webaccess_login.md

6.4.1311.0 KB
Original Source

Vulnerable Application

This module allows you to authenticate to Advantech WebAccess.

This module was specifically tested on versions 8.0, 8.1, and 8.2:

8.2 Download

http://advcloudfiles.advantech.com/web/Download/webaccess/8.0/AdvantechWebAccessUSANode8.0_20141103_3.4.3.exe

8.1 Download

http://advcloudfiles.advantech.com/web/Download/webaccess/8.1/AdvantechWebAccessUSANode8.1_20151230.exe

8.0 Download

http://advcloudfiles.advantech.com/web/Download/webaccess/8.0/AdvantechWebAccessUSANode8.0_20141103_3.4.3.exe

Note:

By default, Advantech WebAccess comes with a built-in account named admin, with a blank password.

Verification Steps

  1. Make sure Advantech WebAccess is up and running
  2. Start msfconsole
  3. use auxiliary/scanner/http/advantech_webaccess_login
  4. set RHOSTS [IP]
  5. Set credentials
  6. run
  7. You should see that the module is attempting to log in.

Scenarios