If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Eircom made Packertstorm...

Phractal · 2011-03-27 17:23:19

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward? In the text file the guy couldny get remote access working ... so he just cut that bit :P Think this will create a fuss?

Options

27-03-2011 6:23pm

#1

Phractal

Closed Accounts Posts: 452 ✭✭

Join Date: August 2009

Posts: 430

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldny get remote access working ... so he just cut that bit :P

Think this will create a fuss?

3

Comments

Options
#2 05-04-2011 1:55pm
h57xiucj2z946q

Closed Accounts Posts: 2,267 ✭✭✭

Join Date: September 2006

Posts: 2097

Phractal wrote: »

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldn't get remote access working ... so he just cut that bit :P

Think this will create a fuss?

As far as I know, the default admin passwords aren't hardcoded on most of the netopia models for Eircom, but still can be predicted/generated from the MAC address. A guy here disclosed all this info about 2.5 years ago.

http://www.boards.ie/vbulletin/showthread.php?p=56353742

and

http://www.boards.ie/vbulletin/showthread.php?t=2055318831

0
Options
#3 14-04-2011 11:41am
Phractal

Closed Accounts Posts: 452 ✭✭

Join Date: August 2009

Posts: 430

Thats the WEP key vuln you are thinking of, the admin login is *still* open.

I tested it on a few of my mates routers, and by god its fork()ing stupidity.

As FX from Phenoelit says:
"They never stop doing this, do they?"

0
Options
#4 14-04-2011 1:21pm
h57xiucj2z946q

Closed Accounts Posts: 2,267 ✭✭✭

Join Date: September 2006

Posts: 2097

I'm not on about the wep generation vulnerable.

I'm on about the default router login Gen. Read http://www.boards.ie/vbulletin/showpost.php?p=56257936&postcount=10 first, then http://www.boards.ie/vbulletin/showthread.php?t=2055318831

By the way, the WPA generation algorithm is contained in the router firmware itself. Factory reset a router, the original WPA key is set again. There are traces of that famous lyric used in the WEP key algo on the setup CD, now in the firmware itself.

0