Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How I Hacked a Router

disconnected.io

Post reply on HN
Print view View original

51–60 of 96 posts

Re: How I Hacked a Router

#51

Post by iambateman »

thaumaturgy wrote: post #31
siliconc0w wrote: post #21

Everything is feasible except the faked linkedin email - it wouldn't pass SPF and so I'm pretty sure gmail would junk it.

Well, I was all set to explain that SPF only checks the envelope sender, not the from: address header that is displayed to the user. Then I decided to test it, and in fact Gmail does seem to be doing more than that. I ran a two-line script as root from my mail server to send a message with an envelope-sender from my domain (which has a basic SPF txt record in its DNS) and a from: header from LinkedIn, and Gmail spit…

If it's a corporate email account (as is mentioned), Microsoft is a much likelier candidate.

Re: How I Hacked a Router

#53

Post by [deleted] »

yesiamyourdad wrote: post #17
refurb wrote: post #9

Earlier quoted context omitted.

Exactly, I'm not much of a techie, but checking the domains of suspicious links is the first thing I do.

The problem with most phishing emails are that they suck - they don't even pass a cursory smell test. A linkedin from someone I know who I'm not already connected with (not too hard to figure out potential connections especially if you've worked for small companies), worded exactly like a linked in email only changing the accept button link? Odds are I'd click and not look at the link target.

[deleted]

Re: How I Hacked a Router

#54

Post by svas »

Curious how the author knew to seed the backdoor'ed Notepad++ before Bill clicked the link?

I suppose you could just serve up a fake backdoor program for every *.exe\msi download, and remove the honeypot on the second download? The first download would execute and maybe do nothing (or error) - prompting a second download which led to the real thing.

Re: How I Hacked a Router

#55

Post by ivansavz »

Okay so OpenWRT stopped being optional now...

Any hardware recommendations for what I should look in for in a router? Is old better than new? Any particular model that is well supported?

Re: How I Hacked a Router

#57

Post by fiatmoney »

ivansavz wrote: post #55

Okay so OpenWRT stopped being optional now... Any hardware recommendations for what I should look in for in a router? Is old better than new? Any particular model that is well supported?

Ubiquiti AirRouter or AirRouter HP. Almost all Ubiquiti gear works completely transparently with OpenWRT, out of the box. In fact their stock firmware is built on top of OpenWRT.
Post reply on HN