5 ms·
The web is full of articles like this. Vendors still come out with shitty, usually GPL-violating firmware. Links below from some quick googling and going throug
by finnn 12y ago
The web is full of articles like this. Vendors still come out with shitty, usually GPL-violating firmware. Links below from some quick googling and going through the archives of devttys0.com, but it doesnt even begin to describe the problem. Nearly every consumer router has some stupid injection or authentication bypass vulnerability.
[0] http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/ http://www.devttys0.com/2013/10/reverse-engineering-a-d-link...
[1] http://www.exploit-db.com/exploits/35917/ http://www.exploit-db.com/exploits/35917/
[2] http://arstechnica.com/security/2014/02/bizarre-attack-infects-linksys-routers-with-self-replicating-malware/ http://arstechnica.com/security/2014/02/bizarre-attack-infec...
[3] https://threatpost.com/more-trouble-for-linksys-home-small-office-routers/104322 https://threatpost.com/more-trouble-for-linksys-home-small-o...
[4] http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-algorithm/ http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-al...
[5] http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-algorithm/ http://www.devttys0.com/2015/04/reversing-belkins-wps-pin-al...
[6] http://www.devttys0.com/2014/05/hacking-the-dsp-w215-again-again-again/ http://www.devttys0.com/2014/05/hacking-the-dsp-w215-again-a...
[7] http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-smart-plug/ http://www.devttys0.com/2014/05/hacking-the-d-link-dsp-w215-...
[8] http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overflow/ http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overfl...
[9] http://www.devttys0.com/2014/02/cracking-linksys-crypto/ http://www.devttys0.com/2014/02/cracking-linksys-crypto/
- iancarroll 12y agoSome Netgear routers even have a built-in (root) telnet server and a command to dump the admin password. https://ian.sh/blog/2014/10/18/netgear-wndr4000-security/ https://ian.sh/blog/2014/10/18/netgear-wndr4000-security/