On TP-Link routers there is a hidden web shell that requires a password. In this video we show you how to use NMap http-tplink-dir-traversal NSE Script to obtain the hashes and then John to crack the password and obtain root access to the device via the web shell.