Linksys在场侦测

如果你家里刚好使用了Linksys的路由器，那么就可以使用下面的方法获取在线设备了。娃哈哈哈！

#/bin/bash

IPADDR=192.168.1.1
PASSWD=secret
ACTION=devicelist/GetDevices

curl -s -H 'Content-Type: application/json' -H "X-JNAP-Authorization: Basic $(echo -n "admin:$PASSWD" | base64)" -H "X-JNAP-Action: http://linksys.com/jnap/$ACTION" http://$IPADDR/JNAP/ -d '{}' |
  jq -r '.output.devices[]|select(.connections!=[]).friendlyName' |
    cat -n

$ ./linksys.sh
     1  LinksysXXXXXX
     2  DESKTOP-XXXXXX
     3  raspberrypi
     4  Phone-XXXXXX
     5  Chromecast

参考:

• https://puzzor.github.io/Linksys-Velop-Information-Leak
• https://github.com/zeropwn/Linksys-Smart-WiFi-Information-Disclosure
• https://github.com/reujab/linksys
• https://github.com/home-assistant/core/blob/dev/homeassistant/components/linksys_smart/device_tracker.py