Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.

https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Eircom made Packertstorm...

Phractal · 2011-03-27 17:23:19

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward? In the text file the guy couldny get remote access working ... so he just cut that bit :P Think this will create a fuss?

27-03-2011 06:23PM

#1

Phractal

Closed Accounts Posts: 452 ✭✭

Join Date: August 2009

Posts: 430

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldny get remote access working ... so he just cut that bit :P

Think this will create a fuss?

3

Comments

#2 05-04-2011 01:55PM

h57xiucj2z946q

Closed Accounts Posts: 2,267 ✭✭✭

Join Date: September 2006

Posts: 2097

Phractal wrote: »

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldn't get remote access working ... so he just cut that bit :P

Think this will create a fuss?

As far as I know, the default admin passwords aren't hardcoded on most of the netopia models for Eircom, but still can be predicted/generated from the MAC address. A guy here disclosed all this info about 2.5 years ago.

http://www.boards.ie/vbulletin/showthread.php?p=56353742

and

http://www.boards.ie/vbulletin/showthread.php?t=2055318831

0
#3 14-04-2011 11:41AM

Phractal

Closed Accounts Posts: 452 ✭✭

Join Date: August 2009

Posts: 430

Thats the WEP key vuln you are thinking of, the admin login is *still* open.

I tested it on a few of my mates routers, and by god its fork()ing stupidity.

As FX from Phenoelit says:
"They never stop doing this, do they?"

0
#4 14-04-2011 01:21PM

h57xiucj2z946q

Closed Accounts Posts: 2,267 ✭✭✭

Join Date: September 2006

Posts: 2097

I'm not on about the wep generation vulnerable.

I'm on about the default router login Gen. Read http://www.boards.ie/vbulletin/showpost.php?p=56257936&postcount=10 first, then http://www.boards.ie/vbulletin/showthread.php?t=2055318831

By the way, the WPA generation algorithm is contained in the router firmware itself. Factory reset a router, the original WPA key is set again. There are traces of that famous lyric used in the WEP key algo on the setup CD, now in the firmware itself.

0