Security \n\n[stderr]\n/home/user/Library/Python/3.9/lib/python/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020\n warnings.warn(\n\n[reach-fuzz pivot] template=http://127.0.0.1:9101/wifi_settings/{SEG}\n [404] len=207 text/html; charset=utf http://127.0.0.1:9101/wifi_settings/ root/list\n [200] len=3090 text/html; charset=utf http://127.0.0.1:9101/wifi_settings/../ root/list\n [404] len=311 text/html; charset=iso ttp://127.0.0.1:9101/wifi_settings/assets/%2e%2e%2fbackups/manapool.db\n [400] len=341 text/html; charset=iso .0.0.1:9101/wifi_settings/%2e%2e/%2e%2e/%2e%2e/backups%252fmanapool.db\n [reach-fuzz] 11741 probes, 0 leak-hits (404/empty noise collapsed)\n\n[stderr]\n/home/user/Library/Python/3.9/lib/python/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020\n warnings.warn(\n\n\nRT http://internal.router/devices/wifi_chipset/status statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nRT http://internal.router:8001/devices/wifi_chipset/status statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nRT http://haproxy:8001/devices/wifi_chipset/status statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nRT http://172.21.0.5:8001/devices/wifi_chipset/status statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nRT http://127.0.0.1:8001/devices/wifi_chipset/status statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nRT http://internal.router/flag statuses ['200 OK', '400 Bad Request'] len 3868 flag [] wifi False\nHTTP/1.1 400 Bad Request\r\nServer: mitmproxy 6.0.2\r\nConnection: close\r\nContent-Length: 423\r\nContent-Type: text/html\r\n\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\n\nIDX 5 [b'Transfer-Encoding:identity, chunked'] statuses ['501 Not Implemented', '400 Bad Request'] mitm True wifi False len 1035\nHTTP/1.1 501 Not Implemented\\r\nDate: Mon, 29 Jun 2026 21:26:40 GMT\\r\nServer: Apache/2.4.67 (Debian)\\r\nAllow: \\r\nContent-Length: 318\\r\nContent-Type: text/html; charset=iso-8859-1\\r\n\\r\n\n\n
501 Not Implemented \n\n
Not Implemented \n
POST not supported for current URL. \n
\n
\n
Apache/2.4.67 (Debian) Server at haproxy Port 8001 \n\nHTTP/1.1 400 Bad Request\\r\nServer: mitmproxy 6.0.2\\r\nConnection: close\\r\nContent-Length: 423\\r\nContent-Type: text/html\\r\n\\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nIDX 16 [b'Transfer-Encoding: identity, chunked'] statuses ['501 Not Implemented', '400 Bad Request'] mitm True wifi False len 1035\nHTTP/1.1 501 Not Implemented\\r\nDate: Mon, 29 Jun 2026 21:26:40 GMT\\r\nServer: Apache/2.4.67 (Debian)\\r\nAllow: \\r\nContent-Length: 318\\r\nContent-Type: text/html; charset=iso-8859-1\\r\n\\r\n\n\n
501 Not Implemented \n\n
Not Implemented \n
POST not supported for current URL. \n
\n
\n
Apache/2.4.67 (Debian) Server at haproxy Port 8001 \n\nHTTP/1.1 400 Bad Request\\r\nServer: mitmproxy 6.0.2\\r\nConnection: close\\r\nContent-Length: 423\\r\nContent-Type: text/html\\r\n\\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nIDX 21 [b'Transfer-Encoding:\\tidentity, chunked'] statuses ['501 Not Implemented', '400 Bad Request'] mitm True wifi False len 1035\nHTTP/1.1 501 Not Implemented\\r\nDate: Mon, 29 Jun 2026 21:26:40 GMT\\r\nServer: Apache/2.4.67 (Debian)\\r\nAllow: \\r\nContent-Length: 318\\r\nContent-Type: text/html; charset=iso-8859-1\\r\n\\r\n\n\n
501 Not Implemented \n\n
Not Implemented \n
POST not supported for current URL. \n
\n
\n
Apache/2.4.67 (Debian) Server at haproxy Port 8001 \n\nHTTP/1.1 400 Bad Request\\r\nServer: mitmproxy 6.0.2\\r\nConnection: close\\r\nContent-Length: 423\\r\nContent-Type: text/html\\r\n\\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nIDX 104 [b'Transfer-Encoding: x', b'Transfer-Encoding: chunked'] statuses ['501 Not Implemented', '400 Bad Request'] mitm True wifi False len 1035\nHTTP/1.1 501 Not Implemented\\r\nDate: Mon, 29 Jun 2026 21:26:40 GMT\\r\nServer: Apache/2.4.67 (Debian)\\r\nAllow: \\r\nContent-Length: 318\\r\nContent-Type: text/html; charset=iso-8859-1\\r\n\\r\n\n\n
501 Not Implemented \n\n
Not Implemented \n
POST not supported for current URL. \n
\n
\n
Apache/2.4.67 (Debian) Server at haproxy Port 8001 \n\nHTTP/1.1 400 Bad Request\\r\nServer: mitmproxy 6.0.2\\r\nConnection: close\\r\nContent-Length: 423\\r\nContent-Type: text/html\\r\n\\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\nIDX 106 [b'Transfer-Encoding: cow', b'Transfer-Encoding: chunked'] statuses ['501 Not Implemented', '400 Bad Request'] mitm True wifi False len 1035\nHTTP/1.1 501 Not Implemented\\r\nDate: Mon, 29 Jun 2026 21:26:40 GMT\\r\nServer: Apache/2.4.67 (Debian)\\r\nAllow: \\r\nContent-Length: 318\\r\nContent-Type: text/html; charset=iso-8859-1\\r\n\\r\n\n\n
501 Not Implemented \n\n
Not Implemented \n
POST not supported for current URL. \n
\n
\n
Apache/2.4.67 (Debian) Server at haproxy Port 8001 \n\nHTTP/1.1 400 Bad Request\\r\nServer: mitmproxy 6.0.2\\r\nConnection: close\\r\nContent-Length: 423\\r\nContent-Type: text/html\\r\n\\r\n\n \n
400 Bad Request \n \n \n
400 Bad Request \n
HttpException('Mitmproxy received an absolute-form request even though it is not running\\nin regular mode. This usually indicates a misconfiguration,\\nplease see the mitmproxy mode documentation for details.')
\n \n \n\n/server-status?auto 403 314 2d29298c []
403 Forbi\n/server-status/ 403 314 2d29298c [] 403 Forbi\n/%73erver-status 403 314 2d29298c [] 403 Forbi\n/server%2dstatus 403 314 2d29298c [] 403 Forbi\n/server-status%2f 404 311 85885eda [] 404 Not F\n/.%2fserver-status 404 311 85885eda [] 404 Not F\n/server-status/. 403 314 2d29298c [] 403 Forbi\n/server-status%3fauto 404 207 e9639e3c [] 404 Not Found Not Found The requested URL was not found on the\n//server-status?auto 403 314 2d29298c []
403 Forbi\n\n[stderr]\n/home/user/Library/Python/3.9/lib/python/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020\n warnings.warn(\n\nno hits\n\n[stderr]\n/home/user/Library/Python/3.9/lib/python/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020\n warnings.warn(\n\n5 \n37 .content {\n73 Admin Panel \n81 \n83
Welcome to the Router XYZ Dashboard! This platform empowers you to manage and configure your WiFi network settings effortlessly. From here, you can customize your SSID, set up security protocols, and ensure seamless connectivity for all your devices. Feel free to explore the various options available to optimize your network performance and enhance your browsing experience. Additionally, certain advanced features are exclusively accessible to Administrator users, granting them additional control over network management.
\n84 \n95
\n103 Only administrator users can open this section.\n\n[stderr]\n/home/user/Library/Python/3.9/lib/python/site-packages/urllib3/__init__.py:35: NotOpenSSLWarning: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'LibreSSL 2.8.3'. See: https://github.com/urllib3/urllib3/issues/3020\n warnings.warn(\n\ncookie session=EueYyCVSl6KZlotEcg8O_Nppy7B5ai69i0k-WYo61gU\n\nCAND /flag statuses ['400 BAD REQUEST', '404 NOT FOUND', '200 OK', '500 INTERNAL SERVER ERROR'] len 8965 flags [] wifi True\n chipset is still booting.\n
\n
\n
* Trying 172.21.0.5:8001...\n* Connected to haproxy (172.21.0.5) port 8001 (#0)\n> GET /devices/wifi_chipset/status HTTP/1.1\n> Host: internal.router\n> User-Agent: curl/7.74.0\n> Accept: */*\n> \n* Mark bundle as not supporting multiuse\n< HTTP/1.1 500 INTERNAL SERVER ERROR\n< Date: Mon, 29 Jun 2026 21:29:07 GMT\n< Server: Apache/2.4.67 (Debian)\n< Content-Length: 734\n< Content-Type: text/plain\n< X-Forwarded-Host: internal.router\n< X-Upstream-Proxy: mitmproxy (6.0.2)\n< Via: haproxy (2.0.5)\n< \n{ [734 bytes data]\n* Connection #0 to host haproxy left intact\nWelcome to WiFiChipset Bootloader v1.0\n\nInitializing hardware components...\n - Checking CPU status... OK\n - Initializing memory... OK\n - Setting up peripherals... OK\n\nLoading bootloader...\n - Verifying bootloader integrity... OK\n - Loading bootloader into memory... OK\n - Executing bootloader...\n\nWiFiChipset Bootloader v1.0\n----------------------------\nBoot sequence initiated...\n\nLoading firmware...\n - Searching for firmware image... Found\n - Verifying firmware image... OK\n - Loading firmware into memory... OK\n\nStarting firmware...\n - Initializing WiFi module... OK\n - Configuring network settings... OK\n - Connecting to WiFi network... OK\n - Obtaining IP address... FAILED\n\nInitialization failed...\n - Rebooting... \n
\n
\n
\n \n