<html>
<head>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script> <!-- hier lade ich jQuery vom Google CDN -->
<script type="text/javascript">
function playStation(stationnr) {
$("#msgs").empty();
if (stationnr == 0) {
$("#msgs").append("Stop playing");
} else {
$("#msgs").append("Start playing station nr="+stationnr);
}
var url = "http://fritz.repeater/cgi-bin/webcm"
var params = {
'configd:settings/NLR/PlayControl': stationnr, // sending stationnr==0 does stop all playback
'login:command/password' : '<your_password>' // hier dein Passwort eintragen!
}
$.post(url, params); // This request actually returns an error in the browser's console. But my Firtz.repeater does start playing the radio stream
$("#msgs").append(".");
}
</script>
</head>
<body>
<h1>Fritz.Repeater - Internet Radio</h1>
<ul>
<li><a href="#" onclick="playStation(1)">Play station One</a></li>
<li><a href="#" onclick="playStation(2)">Play station Two</a></li>
<li><a href="#" onclick="playStation(3)">Play station Three</a></li>
<li><a href="#" onclick="playStation(4)">Play station Four</a></li>
<li><a href="#" onclick="playStation(0)"><b>Stop</b> playing</a></li>
</ul>
<div id="msgs"><p> </p></div>
<p><span style="color:#999; position:absolute; bottom:10px; right:10px;">This is free software. www.doogie.de</span></p>
</body>
</html>curl 'http://fritz.repeater/cgi-bin/webcm' -H 'Accept: */*' -H 'Origin: null' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' --data 'configd%3Asettings%2FNLR%2FPlayControl=1' --compressed
Welche FW hat der? Da hast du bestimmt eine Sicherheitslücke entdeckt.
:anfang
curl [url]http://fritz.repeater/cgi-bin/webcm[/url] --data "configd:settings/NLR/PlayControl=1" --data "login:command/password=MEINPASSWORT" --silent --connect-timeout 1 > nul
sleep 10
goto anfang
<input type="hidden" name="configd:settings/WEBRADIO4/Name" value="Deutschlandfunk" id="uiPostRStationName4" disabled>
<input type="hidden" name="configd:settings/WEBRADIO4/URL" value="http://www.dradio.de/streaming/dlf.m3u" id="uiPostRStationUrl4" disabled>
<input type="hidden" name="configd:settings/WEBRADIO4/Bitmap" value="1" id="uiPostRStationBitmap4" disabled><input type="hidden" name="configd:settings/WEBRADIO19/Name" value="" id="uiPostRStationName19" disabled>
<input type="hidden" name="configd:settings/WEBRADIO19/URL" value="" id="uiPostRStationUrl19" disabled>
<input type="hidden" name="configd:settings/WEBRADIO19/Bitmap" value="0" id="uiPostRStationBitmap19" disabled><input type="hidden" name="var:RStationId" value="" id="uiPostRStationId">
<input type="hidden" name="configd:settings/NLR/PlayControl" value="5" id="uiPostPlayControl" disabled>
<input type="hidden" name="configd:settings/NLR/PlayStatus" value="5" disabled>
<input type="hidden" name="configd:settings/NLR/PlayText" value="Christoph Wagner - Die Minimal Music erfindet sich neu" disabled>
<input type="hidden" name="configd:settings/NLR/PlayName" value="Deutschlandfunk" disabled>
<input type="hidden" name="configd:settings/NLR/PlayLastID" value="5" disabled><input type="hidden" name="nlr:settings/fmstatus" value="3" id="PostFMStatus" disabled>
<input type="hidden" name="nlr:settings/fmfreq" value="9580" id="PostFMFreq" disabled>
<input type="hidden" name="nlr:settings/fmscan" value="0" id="PostFMScan" disabled>
<input type="hidden" name="nlr:settings/fmrds_station" value="FRITZ! Audio" id="PostRDSStation" disabled><input type="hidden" name="nlr:settings/audiostatus" value="0" id="PostAudioStatus" disabled>
