.

Hack router Password

<<

creepinshadow

Newbie
Newbie

Posts: 5

Joined: Sat Dec 08, 2007 6:31 pm

Post Sat Dec 08, 2007 6:44 pm

Hack router Password

Hi,
how can i hack a routers password
it's a web form
i get the routers login page when i enter 192.168.1.1
i tried Brutus, but somehow brutus always says timeout.. maybe some1 can help me wid that..

i also included the source code of that page,
i think it uses md5 ecncryption,

i'm not very professional hacker but do my best to keep up.

Please tel me what to do

thx
<<

LSOChris

Post Sat Dec 08, 2007 10:18 pm

Re: Hack router Password

try hydra
<<

creepinshadow

Newbie
Newbie

Posts: 5

Joined: Sat Dec 08, 2007 6:31 pm

Post Sat Dec 08, 2007 10:23 pm

Re: Hack router Password

well i have no idea how hydra for win works, since there's no gui.
could u give me some sort of tutorial please?
<<

LSOChris

Post Sun Dec 09, 2007 12:36 am

Re: Hack router Password

hydra:
hydra -l admin -p mypass 192.168.0.1 http-get htp://192.168.0.1
hydra -l admin -p mypass 192.168.0.1 http-head htp://192.168.0.1

medusa
cg@segfault:~/evil/bruteforce/ $ medusa -h 192.168.0.1 -u admin -p mypass -M http

Medusa v1.3 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>

ACCOUNT CHECK: [http] Host: 192.168.0.1 (1/1) User: admin (1/1) Password: mypass (1/1)
ACCOUNT FOUND: [http] Host: 192.168.0.1 User: admin Password: mypass [SUCCESS]
<<

creepinshadow

Newbie
Newbie

Posts: 5

Joined: Sat Dec 08, 2007 6:31 pm

Post Sun Dec 09, 2007 11:42 am

Re: Hack router Password

thanks allot man ;),

how can i replace
"mypass" against a brute force attack?
cause its a web form, and shouldnt it be http-post?
Last edited by creepinshadow on Sun Dec 09, 2007 12:01 pm, edited 1 time in total.
<<

LSOChris

Post Sun Dec 09, 2007 2:25 pm

Re: Hack router Password

you're not even reading the man page are you?

  Code:
 service   the service to crack.
Supported protocols: telnet ftp pop3[-ntlm]  
imap[-ntlm] smb smbnt
http[s]-{head|get}
http-{get|post}-form
http-proxy cisco  cisco-enable vnc ldap2 ldap3 mssql mysql
oracle-listener postgres nntp socks5   rexec rlogin pcnfs snmp
rsh cvs svn icq sapr3 ssh2 smtp-auth[-ntlm] pcanywhere 
teamspeak sip vmauthd


-->http-{get|post}-form

-P password.lst
Last edited by LSOChris on Sun Dec 09, 2007 2:29 pm, edited 1 time in total.
<<

creepinshadow

Newbie
Newbie

Posts: 5

Joined: Sat Dec 08, 2007 6:31 pm

Post Sun Dec 09, 2007 2:56 pm

Re: Hack router Password

so is it:

hydra http-form-post 192.168.1.1:user=^user_name^&pass=^passwd1^&mid=failed

or?

hydra -l admin -p -P http-form-post 192.168.1.1:user=^user_name^&pass=^passwd1^&mid=failed


i dont know how to brute force, do i first have to create a brute force word list? and how?
<<

manju_salian

User avatar

Jr. Member
Jr. Member

Posts: 89

Joined: Mon Apr 09, 2007 1:31 am

Post Thu Mar 06, 2008 5:27 am

Re: Hack router Password

I tried the same command
hydra -l admin -p mypass xx.xx.xxx.xxx http-get htp://xx.xx.xx.xxx

I am finding the error that
child with pid 2948 terminating,cannot connect

can anyone help what the error indicates
<<

Koiso

Newbie
Newbie

Posts: 3

Joined: Tue Mar 18, 2008 5:44 pm

Post Tue Mar 18, 2008 5:47 pm

Re: Hack router Password

Hello,
I have a problem with Medusa, it don't discover my password

root@xxx-desktop:/home/who# medusa -h 192.168.2.1 -u admin -p 1234 -M http
Medusa v1.4 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>

ACCOUNT CHECK: [http] Host: 192.168.2.1 (1/1) User: admin (1/1) Password: 1234 (1/1)

and it stop....
<<

LSOChris

Post Tue Mar 18, 2008 6:21 pm

Re: Hack router Password

does your web server use basic authentication?
<<

Koiso

Newbie
Newbie

Posts: 3

Joined: Tue Mar 18, 2008 5:44 pm

Post Wed Mar 19, 2008 8:31 am

Re: Hack router Password

It use wap.

Thanks
<<

LSOChris

Post Wed Mar 19, 2008 6:05 pm

Re: Hack router Password

hmmm windows authentication protocol???
<<

Koiso

Newbie
Newbie

Posts: 3

Joined: Tue Mar 18, 2008 5:44 pm

Post Thu Mar 20, 2008 4:51 am

Re: Hack router Password

I'm working under ubuntu.
<<

LSOChris

Post Thu Mar 20, 2008 6:37 am

Re: Hack router Password

hmm i'll rephrase.  what type of webserver are you running and on what OS?
<<

znorc

Newbie
Newbie

Posts: 1

Joined: Sat Mar 29, 2008 6:32 am

Post Sat Mar 29, 2008 6:38 am

Re: Hack router Password

ChrisG wrote:hmm i'll rephrase.  what type of webserver are you running and on what OS?


I use windows XP, and i am trying to "hack" my router here at home (Zyxel NBG-415N)

I am using the same commands, but ip is 168.192.2.1

and as password to the router, i get "mypass" by using your command, and when i try to login on the router with that, it is incorrect.

heeelp
Next

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software