41–50 of 144 posts
Why backdoor?? That's what I want to know.
It's a backdoor in the sense that it allows you to change settings on the modem with no credentials.
It's plausible that on a badly configured network this port could be exposed to the Internet. Anyone want to check Shodan?
Earlier quoted context omitted.
Can you tell me which parts you couldn't get? I want to test my understanding - I'll see if I can explain it to you.
My main problems were with the memes. Seriously, nothing against a little humor in your slides. But making every seconds slide a meme reference gets annoying pretty fast :)
Earlier quoted context omitted.
Can you tell me which parts you couldn't get? I want to test my understanding - I'll see if I can explain it to you.
My main problems were with the memes. Seriously, nothing against a little humor in your slides. But making every seconds slide a meme reference gets annoying pretty fast :)
And this didn't even have a talk.
That's a pretty scary prospect. If its been 'known' and exploited since at least 2008. Poor form Netgear/Linksys.
Earlier quoted context omitted.
Could you describe the whole reversing process in a bit more detail? Binary goes in, understanding comes out, you can't explain that (well I hope someone can).
I'm going to rush this, sorry. * Guy sees service running on 32764 and thinks that's quite odd * Gets very frustrated at useless forum posts from people with no clue * Downloads a copy of the firmware from the (horrible) modem-help.co.uk This is where it gets interesting: Binwalk ------ First off, a program called Binwalk is used. This is a combo of a really cool python script, the libmagic database (if you've used t…
(He also greps for the string the server sent upon connection, but it's nowhere to be found. He then just greps for bind and filters for binary files only, to find all binaries that call bind (remember dynamic linking in the end comes down to strings..))
At first I thought it was this, which has been known for a long time now: http://wiki.openwrt.org/toh/netgear/telnet.console
Earlier quoted context omitted.
Can you tell me which parts you couldn't get? I want to test my understanding - I'll see if I can explain it to you.
My main problems were with the memes. Seriously, nothing against a little humor in your slides. But making every seconds slide a meme reference gets annoying pretty fast :)
A well-placed meme for humour can be good, I agree.
TIL: Some people know a lot more than me about hacking. That PDF was interesting, but I only understood a small fraction of it.
Can you tell me which parts you couldn't get? I want to test my understanding - I'll see if I can explain it to you.
I hacked my Fritz!Box (yeah, a bad name for a german router) and I'm entirely sure that it has a backdoor integrated too. That's why I wiped and flashed it with an alternative image. That and the Telecom's Speedport router are the most popular routers by far in Germany. And both have backdoors, I know that other router manufacturers also integrate backdoors from a source who works at such a company. A friend can also…
Please provide evidence for the alleged backdoor in AVM Fritz!Box routers. Being sure is not convincing … I don't see why you had to hack an AVM router either – you can easily install other firmware and Fritz!Box routers can be directly bought anyway.
That's what I did, I flashed it with a custom firmware (that was after I got aware of the backdoor). I've not "reverse-engineered" the base image of my own router like in the article above, because that's a lot of work. I've worked on an awful lot of routers, hubs, switches of all sorts, enterprise and consumer. Have been network administrator for a large global company and I think that I can trust my sources.
What the new user "blablablaat " mentioned is obvious, I'm not stupid to make something like this up. Of course I have no "Provider Services" or anything remotely similar enabled, but it's still possible to connect to the router and take control over it according to my source and I've seen it back then, when I asked for him/her to show it. Now why, do you expect me to prove that? A security researcher, is more qualified than me to create the convincing report you're asking for, sorry. You can feel free to do it yourself too, if you want. It's not my intention to spread rumors or FUD, but to make you at least aware of that your router ain't secure.