DEFCON 18: How to Hack Millions of Routers 3/3

Speaker: Craig Heffner


This talk will demonstrate how many consumer routers can be exploited via DNS rebinding to gain interactive access to the router's internal-facing administrative interface. Unlike other DNS rebinding techniques, this attack does not require prior knowledge of the target router or the router's configuration settings such as make, model, internal IP address, host name, etc, and does not rely on any anti-DNS pinning techniques, thus circumventing existing DNS rebinding protections.

A tool release will accompany the presentation that completely automates the described attack and allows an external attacker to browse the Web-based interface of a victim's router in real time, just as if the attacker were sitting on the victim's LAN. This can be used to exploit vulnerabilities in the router, or to simply log in with the router's default credentials. A live demonstration will show how to pop a remote root shell on Verizon FIOS routers (ActionTec MI424-WR).

Confirmed affected routers include models manufactured by Linksys, Belkin, ActionTec, Thompson, Asus and Dell, as well as those running third-party firmware such as OpenWRT, DD-WRT and PFSense.

For presentations, whitepapers or audio version of the Defcon 18 presentations visit: http://defcon.org/html/links/dc-archives/dc-18-archive.html

Category:

Science & Technology

Tags:

• 10
• defcon
• 097
• clip3

[eatyoursouls]

somethings wrong with video, either its the video or me. constant refreshing isnt helping.

[ChRiStIaAn008]

@eatyoursouls video plays fine here, only first 10 sec weird picture but that's because it's chopped in pieces

[UNIXSOLJA]

This guy is very good!

[meforgodforall]

You are doing great. I hope you can shoot a rifle/pistol too. : )