Pak Info Zone: Hack ADSL Router

<div dir="ltr" style="text-align: left;" trbidi="on"> <h3 class="post-title entry-title" itemprop="name" style="font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 22px; font-weight: normal; margin: 0.75em 0px 0px; position: relative;">Hack Remote Ethernet ADSL Router - Free Your ADSL Internet</h3><div class="post-header" style="font-size: 11px; line-height: 1.6; margin: 0px 0px 1.5em;"><div class="post-header-line-1"></div></div><div class="post-body entry-content" id="post-body-943625937063655363" itemprop="description articleBody" style="font-size: 13px; line-height: 1.4; position: relative; width: 546px;"><div dir="ltr" trbidi="on">IntroDuction :- An <span3975724>ADSL</span3975724> <span3975724>router</span3975724> is also known as a <span3975724>DSL modem</span3975724>.  The router is used to connect the computer to the DSL phone line for using the ADSL service.  BSNL and MTNL rolled out many ADSL router cum modem during the peak days of rising internet customers in India. <div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-TaDiS6gw0ik/UHRAtCfLuQI/AAAAAAAAA04/jSp2lFXA-C4/s1600/1.jpg" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://1.bp.blogspot.com/-TaDiS6gw0ik/UHRAtCfLuQI/AAAAAAAAA04/jSp2lFXA-C4/s1600/1.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" /></a></div> These ADSL routers have a serious vulnerability in them, which most of you are not aware off . In this post I will show you how to exploit this common vulnerability that lies in most ADSL routers so as to gain complete access to the router settings and ISP login details. Hacking Remote ADSL Routers ( DSL modems ):- Every DSL modem (router) comes with a user name and password using which it is possible to gain access to the router settings and configure the device. The vulnerability actually lies in the Default user name and password that comes with the factory settings. Usually the routers come preconfigured from the Internet Service providerand hence the users do not bother to change the password. This makes it possible for the attackers to gain unauthorized access andmodify the router settings using a common set of default user names and passwords.  Things Required :- 1. <a href="http://angryip.org/w/Download" style="color: #888888; text-decoration: none;" target="_blank">IP Scanner - To scan IPs</a> 2. <a href="http://www.scanwith.com/download/X-Pass.htm" style="color: #888888; text-decoration: none;" target="_blank">X-Pass</a> 3. If you don't have Java installed , Download and Install Java , <a href="http://java.com/en/download/chrome.jsp?locale=en" style="color: #888888; text-decoration: none;" target="_blank">Click Here</a> 4. Internet Explorer Beginning with Scanning 1. Go <a href="http://www.cmyip.com/" style="color: #888888; text-decoration: none;" target="_blank">HERE</a> ,and note your IP address. 2. Open Angry IP scanner it will look like this: <div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-g4diocclw2Y/UHRHOCfCowI/AAAAAAAAA1Y/pcMRgGnNbZc/s1600/2.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="239" src="http://1.bp.blogspot.com/-g4diocclw2Y/UHRHOCfCowI/AAAAAAAAA1Y/pcMRgGnNbZc/s400/2.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" width="400" /></a></div> 3. Here you will see an option called IP Range, Now you will need an IP Range. Which is a range or a list of IP's you will have the IP scanner to scan. 4. So lets say your IP is 117.192.195.101 and you want to look for a vulnerable router in your area, you would set the range as 117.192.194.0 to 117.192.200.255 and that will give you a solid list of 100+ IPs in your area or generally close to your area. 5. Now Go to Tools->Preferences <div class="separator" style="clear: both; text-align: center;"><a href="http://2.bp.blogspot.com/-ocGy4IqIfPA/UHRM913K_UI/AAAAAAAAA14/GxgVVlvu6hk/s1600/3.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://2.bp.blogspot.com/-ocGy4IqIfPA/UHRM913K_UI/AAAAAAAAA14/GxgVVlvu6hk/s1600/3.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" /></a></div> 6. Then under the under the ports tab under Port Selection type 80 'cos we will be interested in hosts with port 80 opened: <div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-GIg3HepUdCs/UHRNXfI6VaI/AAAAAAAAA2A/FrSftjJT9VU/s1600/4.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://1.bp.blogspot.com/-GIg3HepUdCs/UHRNXfI6VaI/AAAAAAAAA2A/FrSftjJT9VU/s1600/4.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" /></a></div> 7. And on the display tab choose "Hosts with open ports only": <div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-RTRIcMJ8SWE/UHRNicoTxyI/AAAAAAAAA2I/tzPHSRqYbAY/s1600/5.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://3.bp.blogspot.com/-RTRIcMJ8SWE/UHRNicoTxyI/AAAAAAAAA2I/tzPHSRqYbAY/s1600/5.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" /></a></div> 8. Then click OK to save the preferences and click start. 9. After a few minutes the scanner will show a list of  Ips with port 80 open. <div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-cC70aawEMpI/UHROLKxqzUI/AAAAAAAAA2Q/YtUPWXLUt2A/s1600/6.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://3.bp.blogspot.com/-cC70aawEMpI/UHROLKxqzUI/AAAAAAAAA2Q/YtUPWXLUt2A/s1600/6.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" /></a></div> 10. Now just select one of the IP addresses and open it with INTERNET EXPLORER!!! <div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-x5PIj-bHbmQ/UHROxwMFo_I/AAAAAAAAA2Y/zL_rj9x-GfE/s1600/7.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="275" src="http://3.bp.blogspot.com/-x5PIj-bHbmQ/UHROxwMFo_I/AAAAAAAAA2Y/zL_rj9x-GfE/s400/7.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" width="400" /></a></div> 11. A webpage will open asking for a username and password, this is the login to their router 12. Now the trick is to abuse the fact that most people are too stupid to change their routers default factory setting router login details.  So when it asks for a password and username try the most common router default logins which are:     UN          PwD -------------------- admin -  admin   admin -  password  admin -  Leave the password blank. 13. Just enter the username-password as specified above and hit enter , If you are lucky you should gain access to the router settings page where you can modify any of the router settings.  The settings page can vary from router to router.  Here is the screenshot of one of the hacked router with default password settings. <div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-ZV4m6GuUPvY/UHRT9vw88oI/AAAAAAAAA24/hP17IK4NgQM/s1600/8.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="285" src="http://1.bp.blogspot.com/-ZV4m6GuUPvY/UHRT9vw88oI/AAAAAAAAA24/hP17IK4NgQM/s400/8.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-color: white; background-position: initial initial; background-repeat: initial initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" width="400" /></a></div> <div>14. If you do not succeed to gain access, select another IP from the list and repeat the step-13. At least 1 out of 5 IPs will have a default password and hence you will surely be able to gain access. Exploitation  Now for most of the routers you can find username in plain text and password covered with *'s when setting up a new connection, so just look for something that says connection wizard or connection setup, and follow the steps till you find the username and password as mentioned. So why did we use Internet Explorer for this?? Because XPass works only with IE, we couldn't figure the pass out if we used Firefox or Chrome or Opera. And now when we have the page where username and pass. are just open XPass click on the X sign and drag it over the *'s and you will have this: <div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; text-align: center;"><a href="http://4.bp.blogspot.com/-KLmFGoJzYhw/UHRXc5xJngI/AAAAAAAAA3Y/mo7XQ0bsfFk/s1600/9.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="282" src="http://4.bp.blogspot.com/-KLmFGoJzYhw/UHRXc5xJngI/AAAAAAAAA3Y/mo7XQ0bsfFk/s400/9.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; padding: 5px; position: relative;" width="400" /></a></div> Bingo, You Found The Username and Password  password in this case is: 854179  Finally You Steal an Internet Connection ,Now You can copy the ISP login details and close (logout)the Router Settings Page. Now Login with The victims username and password and get unlimited download and Browsing. Counter Measures:- Most of the home routers are left out in default configuration state & can be hacked easily. The password vulnerability can easily exploited which later can result in havoc for a user. A little bit of user awareness is required to keep themselves safe. 1. If you are using an ADSL router to <span3975724>connect to the Internet</span3975724>, it is highly recommended that you immediately change your password to prevent any such attacks in the future.  Since the configuration varies from router to router, you need to contact your ISP for details on how to change the password for your model. 2. Keep strong passwords rather than plain one's that can be easily guessed or brute forced. <div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif;"> </div><div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif;"></div><div style="background-color: white; color: #666666; display: inline !important; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif;">3. Keep monitoring your routers logs.</div> <div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif;">4. Some new routers have option to disable remote access. It is recommended to disable any such remote access doors.</div><div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif;"> </div>That's all. Stay safe and Be secure ! Warning! All the information provided in this post are for educational purposes only. Please do not use this information for illegal purposes. </div></div></div></div>

Hack ADSL Router Hack Remote Ethernet ADSL Router

Hack Remote Ethernet ADSL Router - Free Your ADSL Internet IntroDuction :- An ADSL router is also known as a DSL modem . The router is...

Pak Info Zone

Pages

Time

Hack Remote Ethernet ADSL Router

Popular Posts

Contact

Archive