Eircom made Packertstorm...

Phractal

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldny get remote access working ... so he just cut that bit :P

Think this will create a fuss?

h57xiucj2z946q

Phractal wrote: »

http://packetstormsecurity.org/files/view/99769/eircom-backdoor.txt

Well, *someone* has disclosed my little gimmick that I was playing with in Eircom routers... Ah well, aint disclosure the way forward?

In the text file the guy couldn't get remote access working ... so he just cut that bit :P

Think this will create a fuss?

As far as I know, the default admin passwords aren't hardcoded on most of the netopia models for Eircom, but still can be predicted/generated from the MAC address. A guy here disclosed all this info about 2.5 years ago.


http://www.boards.ie/vbulletin/showthread.php?p=56353742

and

http://www.boards.ie/vbulletin/showthread.php?t=2055318831

Phractal

Thats the WEP key vuln you are thinking of, the admin login is *still* open.

I tested it on a few of my mates routers, and by god its fork()ing stupidity.

As FX from Phenoelit says:
"They never stop doing this, do they?"

h57xiucj2z946q

I'm not on about the wep generation vulnerable.

I'm on about the default router login Gen. Read http://www.boards.ie/vbulletin/showpost.php?p=56257936&postcount=10 first, then http://www.boards.ie/vbulletin/showthread.php?t=2055318831


By the way, the WPA generation algorithm is contained in the router firmware itself. Factory reset a router, the original WPA key is set again. There are traces of that famous lyric used in the WEP key algo on the setup CD, now in the firmware itself.