Everything is feasible except the faked linkedin email - it wouldn't pass SPF and so I'm pretty sure gmail would junk it.
I was honestly more surprised anyone clicked anything in a linkedin email - isn't linkedin automatically sent to spam?
How I Hacked a Router
91–96 of 96 posts
Re: How I Hacked a Router
#92Everything is feasible except the faked linkedin email - it wouldn't pass SPF and so I'm pretty sure gmail would junk it.
"Everything is feasible except"
Perhaps someone could comment on the possible prison time if an approach like this was taken without the authorization that this person had in advance?
Also it would seem that it would be fairly easy if you are in physical proximity to the target to use social engineering (as opposed to a bump key - opening the front door) to gain physical access to the premises and find the wifi password right under the router. Or plant something on the network that gives you access - you get the picture. Or plant a keylogger that might not be noticed for months. Or drop a USB key (wouldn't work with an infosec guy but maybe if it was mailed to him and it looked like it came from a reliable source it would).
Re: How I Hacked a Router
#93Earlier quoted context omitted.
So we live in a world where you can browse to a page and have your network compromised? Consider reading the story.
I did. He couldn't attack the router from outside, he had to get his victim to do it from within the network.
No, he just had to get the victim to visit a web page he controlled. That's barely social engineering.
Re: How I Hacked a Router
#94Everything is feasible except the faked linkedin email - it wouldn't pass SPF and so I'm pretty sure gmail would junk it.
It's feasible if the target didn't use Gmail.
Re: How I Hacked a Router
#95"It took about a week before Bill decided to upgrade notepad++ to the new version." Which is why I'm always wary of installing unsigned software. In such cases I try to check some hashes some way. Obviously if the download page lists them I check against those, but in most cases it's insufficient because that page is not HTTPS. So I always help myself with google, both by googling the filename to find some pages list…
googling the hash for mentions of the expected downloaded file is a pretty clever trick!
Re: How I Hacked a Router
#96Okay so OpenWRT stopped being optional now... Any hardware recommendations for what I should look in for in a router? Is old better than new? Any particular model that is well supported?
Ubiquiti AirRouter or AirRouter HP. Almost all Ubiquiti gear works completely transparently with OpenWRT, out of the box. In fact their stock firmware is built on top of OpenWRT.
Just wanted to thank you for the recommendation. New AirRouter is working great. I even set the power level down because I have pretty good connection everywhere in the house.