4 ms·

Anyone played with this? term1$ tcpdump -i en1 -X -n port 32764 term2$ telnet 192.168.0.1 32764 Output doesn't show the expected hex code. Is this naive?

• ancarda 13y ago
  Yeah, I tried but with my external IP: $ telnet [redacted] 32764 Trying [redacted]... telnet: connect to address [redacted]: Connection refused telnet: Unable to connect to remote host Does this mean my router has no backdoor? Is it clever enough to avoid detection?
  • mhurron 13y ago
    Are you running one of the affected hardware models?
    • ancarda 13y ago
      No, but I have a fairly uncommon router (not ISP supplied) so I was curious if it also had a backdoor. It doesn't respond on LAN so it seems my DrayTek Vigor 2750N is backdoor-free for now...
      • walls 13y ago
        That just means it's free of this particular backdoor.
        • ancarda 13y ago
          Hence "for now...". A new backdoor could surface tomorrow.
  • sil3ntmac 13y ago
    Check your internal IP as well, some models are only vulnerable on the LAN. Metasploit has a check module for this, and will also get you a shell: https://community.rapid7.com/community/metasploit/blog/2014/01/17/news-on-the-embedded-systems-land https://community.rapid7.com/community/metasploit/blog/2014/...