DEFCON 18: How to Hack Millions of Routers 1/3

Speaker: Craig Heffner


This talk will demonstrate how many consumer routers can be exploited via DNS rebinding to gain interactive access to the router's internal-facing administrative interface. Unlike other DNS rebinding techniques, this attack does not require prior knowledge of the target router or the router's configuration settings such as make, model, internal IP address, host name, etc, and does not rely on any anti-DNS pinning techniques, thus circumventing existing DNS rebinding protections.

A tool release will accompany the presentation that completely automates the described attack and allows an external attacker to browse the Web-based interface of a victim's router in real time, just as if the attacker were sitting on the victim's LAN. This can be used to exploit vulnerabilities in the router, or to simply log in with the router's default credentials. A live demonstration will show how to pop a remote root shell on Verizon FIOS routers (ActionTec MI424-WR).

Confirmed affected routers include models manufactured by Linksys, Belkin, ActionTec, Thompson, Asus and Dell, as well as those running third-party firmware such as OpenWRT, DD-WRT and PFSense.

For presentations, whitepapers or audio version of the Defcon 18 presentations visit: http://defcon.org/html/links/dc-archives/dc-18-archive.html

Category:

Science & Technology

Tags:

• 10
• defcon
• 097
• clip1

[lackofsupervision]

I'm Commander Shepard and this is my favorite DEFCON 18 video

[1waitandbleed1]

Ah, my schools router uses Javascript to authenticate the login. All I had to do was use Firebug to remove that line, and it lets me in without a problem. :3

[itsbasil1126]

fine dont believe meh, i dont care o.o

[nsawilla]

@itsbasil1126

HAHAHAHAHA! yeah sure^^

[brendameistar]

@itsbasil1126 dumbshit

[JizzMasterPino]

Does anyone have a site to learn all this?

[ozawablog]

Your vid is a favorite on Nay Pyi Taw

[rapandthekillers]

@itsbasil1126 kids, sigh.

[nuttex]

@itsbasil1126 Cool story, bro.

[fryejames12]

Your video is a favorite on Skopje

[alemaaltevinden]

@itsbasil1126 You know why that isn't true? Someone that would have done that wouldn't say it on youtube. Idiot, learn to lie.

[gilmarzenho]

just bullshit

[itsbasil1126]

I hacked my school's network and got into the gradebook, attendance records, student and teacher and administrator files as well as their files on how much money they spend and get and the school's credit card. I screwed around with it and fucked up the network and their files, we didnt have computers for a whole month cuz it took them tht long to figure it out, and from the credit card i got around 23,000$, funny thing is, im only 15 and i did all tht. I covered my trail well and they nvr fo

[MegaTutorial101]

I don't understand a thing!!!

[MrAnimeOST1]

wtf with recommended videos?

[Wolver1nEmkd]

Man defcon people leave in 1992...

[vinngrizzle]

yeah but as u see now that pretty much no good now

[WEEDxSTAR]

@1waitandbleed1 haha

[reddoni]

what if the user browses to ip addresses not domain names :)

[drmanian]

Amazingly impressive.

[ubiqaf]

cool!!

[Safesoned]

Thats really cool!

(hey i am the 3000 viewer)

[kbo206]

Clever.

[StorkReaver]

Amazing !