I Post this on Blog some Ago,,today i posted it here,,
Pre-requirements and tools
All the tools used in this project are easily available in the internet
Hardware Requirements
Laptop: A laptop with the internet connectively with at list 2-3 Ram is required, as I have
used Virtual Workstation for the demonstration. So RAM is consumed as well at least 10
GB hard will be enough for setup.
Router:A TP-link is a company, which mostly manufacture the home based DSL and
ADSL router. TP-LINK is a global provider of networking products, available in over 100
countries with tens of millions of customers. T TP-LINK is a global provider of
SOHO&SMB networking products and the World's No.1 provider of WLAN products, with
products available in over 120 countries to tens of millions customers. Committed to
intensive R&D, efficient production and strict quality management, TP-LINK continues to
provide award-winning networking products in Wireless, ADSL, Routers, Switches, IP
Cameras, Power line Adapters, Print Servers, Media Converters and Network Adapters
for Global end-users. Here router model TD-W8901D with the firmware 6.0.0 is used in
this project for the demonstration proposed.
Browser: A browser is a software application used to locate, retrieve and display content on the
World Wide Web, including Web pages, images, video and other files. As a client/server model,
the browser is the client run on a computer that contacts the Web server and requests information.
The Web server sends the information back to the Web browser, which displays the results on
the computer or other Internet-enabled device that supports a browser.
Mozilla is a free software community best known for producing the Firefox web browser. The
Mozilla community uses, develops, spreads and supports Mozilla products and works to advance
the goals of the Open Source Web application.Any browser will work here I have used Firefox to
access the router.
Demonstration
Procedure for exploiting security vulnerability
Step 1: Try to login to the router with form browser.
As we know
deafault user name and password is admin admin, but sometimes user
change the password but username is same “admin”. So how we access the
router without username and password. If it is your own router or modam
then you will reset it , but what happen if it is your victum’s modam.
So here is the method, using this method you can get the password.
Now just type the ip in your browser of router or modam and place “/rom-0” after your router or modam’s ip . Eg: in case “192.168.1.1/rom-0”
As you can see in pic. Then you got rom file and save it your computer anywhere.
Rom file is
a file where our password of router or modam is saved. Now by using
reverse engineering we get the password from rom file in plain text. But
it is not easy. So here is Russian software by using we decrypt the
password from rom file.
Now just open this link In your browser and download the software,, link is http://www.hakim.ws/huawei/rom-0/
After download the software just open it and click on the button which is highlighted in picture
After click
this button you have to open the rom file which is you download and save
that in your computer, now just select your rom file and click on open
button ,,as you can see in the picture.
When you click on open button then after that in just 1-3 seconds your router or modam password shows to you in plain text.
Post a Comment