"If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology." -Bruce Schneier
Steal ADSL username/password from your neighbours!
Preface
Today, almost everyone has more than one computer at home, and, thus, there are many wireless LANs. For example, in my neighbourhood I can see at least 12 wireless LANs, when seven of them use no encryption. Moreover, five of them still didn't change their default router access username/password.So, anyone is able to configure it easily.
When I got interested in networks hacking/security, I was wondering if it is possible to retrieve ADSL username and password from router configuration screen.
Every router I tried, has at least 2 access ways - HTTP Web service (mostly used), and Telnet service.Both ways demand connection to the LAN.So, if the wLAN communication encrypted, you can try to crack it. Read here, how to do this.
HTTP-based router configuration in Web browser
In order to enter to the router configuration, write in browser address bar the IP address of router. Usually, the default username/password for router config are "Admin/Admin" (D-link, Siemens) or "admin/adminadmin" (3Com). Anyway, you can find it in the Internet, if you know router model. If you're lucky, your lame neighbours didn't change default settings.
In most cases, when I tried to see Internet connection properties of router, I could see only username, and the password usually was masked with asterisk symbols, and there is no option to use java<b></b>script to unmask it. Sometimes, the username/password fields even disappear after a short time period. So, it's impossible to retrieve password in this way, however, it useful to see username and to enable remote administration, if disabled.
Telnet router configuration
After the remote administration has been enabled, it is possible to connect to router's telnet service. If you use Windows, you can do it in command line prompt (cmd) or hyper-terminal, just type "telnet router ip address. Use the same username/password to get into router configuration you entered in Web config mode. When you are inside, type "dumpcfg" command. If this command is not valid, try "?" or "help" to figure which command will show you router settings dump (in my short experience, dumpcfg works on most routers). After you typed the command, you will get a long list of different settings. You must look for something like "<ppp_conId...". In that line, you will see 2 parameters (usually, userName="some long number" password="another long number"). The long hex numbers between quotation marks are encoded username and password for ADSL connection. Each pair of digits equals to a single letter/digit, as shown:
a = 9E
b = 9D
c = 9C
d = 9B
e = 9A
f = 99
g = 98
h = 97
i = 96
j = 95
k = 94
l = 93
m = 92
n = 91
o = 90
p = 8F
q = 8E
r = 8D
s = 8C
t = 8B
u = 8A
v = 89
w = 88
x = 87
y = 86
z = 85
0 = CF
1 = CE
2 = CD
3 = CC
4 = CB
5 = CA
6 = C9
7 = C8
8 = C7
9 = C6
@ = BF
I think it is some standard encoding. Anyway, you can check it by comparing the known ADSL username and its encoded equivalent, and to build your own table. After you finish password decoding, you can try to connect to the Internet using your ADSL modem.
Conclusion: if you have wireless LAN, be sure you protect yourself, as it's written here, and have a good time! P.S. Sorry for my english grammar. Hope you learned something new. Thanks, lxgreen.
Cast your vote on this article 10 - Highest, 1 - Lowest
Comments: Published: 19 comments.
HackThisSite is the collective work of the HackThisSite staff, licensed under a CC BY-NC license.
We ask that you inform us upon sharing or distributing.