Auth bypass to admin access in ZTE F460/F660 web_shell_cmd.gch (sendcmd)

This repository is an operational exploit toolkit targeting ZTE routers (exact models unspecified) via a command injection vulnerability on the /web_shell_cmd.gch endpoint over HTTPS (port 443). The main exploit is implemented in Go (zte.go), which reads a list of target IPs from stdin and sends three crafted HTTP POST requests to each target: (1) copying a file on the device, (2) downloading a binary from an attacker-controlled server, and (3) executing the downloaded binary. The payload is designed to compromise the device and likely add it to a botnet. The repository also includes setup scripts (Scanner.sh, zmap.sh) for preparing the attack environment and a password file (pass_file) for brute-force or scanning purposes. The setup.txt file provides step-by-step instructions for attackers to deploy the exploit and integrate compromised devices into a botnet. The exploit requires the attacker to modify the Go source to specify their own server and binary architecture. The attack vector is network-based, requiring access to the target's HTTPS interface. The endpoints and file paths used in the exploit are clearly fingerprintable, and the overall structure is typical of botnet propagation toolkits.