I vacillated about writing this blog. But chose finally to write it.
Hacking the router is not easy these days but some routers are still prone to attack . You must know certain essentials like
- IP address
- What is an Isp ?
- How to use proxy servers or shell server accounts ( for anonymity).
- How to use ping / Traceroute .
- How to use telnet/Hyper terminal.
- Create a free shell server account at sdf dot lonestart dot org , i have one account there that i use.
- login to that account and then traceroute (tracert xxx.xxx.xxx.xxx) to anybody's ip address.
- find the one with cisco in it's name.
- If it is protected by firewall it will ask you for username and password.
- Then you can use a portscan utility such as superscan etc to check which of the routers ports are open. this tutorial works only on routers without firewall , for hacking firewalls wait for my next blog .
- Cisco routers running v4.1 can be easily disabled.
- Try and enter a huge password string in it then it might reboot in which case you can't hack it but probably it will freeze. if neither happens then disconnect from shell account and use a proxy server and then use ping flooding ping -l 56440 "routerip" -t . -l this defines the packet size and -t for repetitive ping this does the same thing of freezing the router.
- now use another connection with another proxy put the password as admin b'cos this is router's default password when it is temporarily disabled .
- now that you are inside the router type "? or help" for list of available commands you will see a file transfer command "mget" use it to transfer the password file of admin.
- use "john the ripper" a tool for cracking the password from the password file.
- now that you know the password you can login to that and first thing you should do is disable history by typing the command "terminal history size 0" then do whatever you want to do with it.
note : some routers have limited the length of password string in that case you will have to use dos attack(ping flooding) that can achieve the same purpose of freezing the router .
This entry was posted
on Friday, May 8, 2009
at Friday, May 08, 2009
and is filed under
ping flooding,
router attack
. You can follow any responses to this entry through the
comments feed
.
