5 ms·
A few years ago my mother had some problems with her internet, she had recently changed her old D-LINK to a brand new flagship ASUS router. So while visiting h
by hultner 9y ago
A few years ago my mother had some problems with her internet, she had recently changed her old D-LINK to a brand new flagship ASUS router.
So while visiting her I played around with web interface and not many minutes in I managed to gain RCE allowing me to access a full root shell on the router via HTTP and I were even able to fetch the shadow-file. I searched the web and found several similar flaws,
Ever since whenever someone I know is about to buy an ASUS router I make sure to warn them and tell them to at least making sure to run the latest firmware if they go through with the purchase. As for my mother I brought over an old C2D-box which I hooked up with a couple of old Intel Pro Server GBE-nics, configured a NetBSD firewall+nat and reconfigured her router to act as a* dumb access point.
*Should I use an here since the object it is acting upon is started with a vowel or should I let the adjective rule the indefinite article? English isn't my first nor second language and I always struggle with these things so I appreciate any guidance.
- cknight 9y ago"a dumb access point" is correct. It's all about vowel position in the very next word as spoken/written. =)
- kelnage 9y agoI am sad to say this, but this is not such an unusual event in home routers [1]. I'd do the same as you, if not for the fact that it seems impossible to recommend any make/model of router to a home user that doesn't require expert knowledge to properly secure. [1] For examples: https://www.google.co.uk/search?q=router+RCE https://www.google.co.uk/search?q=router+RCE
- brokenmachine 9y agoYour English is very good, I was skim-reading and actually didn't even notice any mistakes until I saw your question at the bottom so I re-read the whole thing, but I thought you may want some comments: > and I were even able to fetch should be "I was" > to at least making sure should be "to at least make sure" Other than that a few commas would be nice to make some of those long sentences flow a bit smoother. If you were speaking, you'd need to take a breath somewhere! You are doing ridiculously good for a third language though!! I have a lot of respect for people who learn languages, it shows a lot of courage and curiosity.
- hultner 9y agoI can't edit my comment anymore but I've taken notice of your critique, thank you very much for being so helpful!