4 ms·
Here in Scotland my broadband router has a unique wifi password, but the admin password for configuring the router is always 'sky'.
by nmeofthestate 12y ago
Here in Scotland my broadband router has a unique wifi password, but the admin password for configuring the router is always 'sky'.
- fulafel 12y agoOutstanding. Sounds like any banner ad you happen across could own your network with a variant of <img src="hxxp://192.168.0.1/admin.cgi?op=login&password=sky">.
- kevinbowman 12y agoTo protect against these kinds of attacks (and DNS rebinding attacks), most (?) modern browsers won't allow a webpage to make requests to non-routable IP addresses unless the page itself came from a non-routable IP address. Not that that's a fix, but it definitely helps mitigate the issue.
- fulafel 12y agoI just tested Firefox and Chrome, both made a HTTP request successfully to my laptop's rfc1918 address referenced from a web page on the internet. Maybe you are thinking of IE's "zones" feature?