[lug] Got D-Link? Got rooted?

[George S.]

I ran into a case where a customer's router had been reconfigured so 
that the DHCP server was handing out DNS servers in Russia. They noticed 
it when the DNS servers went offline, and anyone using DHCP couldn't 
actually do anything on the internet.

They had never set a password for the admin account in the device.

On 10/20/13 5:59 PM, Bear Giles wrote:
> Magic user agent: |xmlset_roodkcableoj28840ybtide|. (read it backwards)
>
> http://www.infoworld.com/d/security/backdoor-found-in-d-link-router-firmware-code-228725
>
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: irc.hackingsociety.org port=6667 channel=#hackingsociety

-- 
George Sexton
MH Software, Inc.
303 438-9585
http://www.mhsoftware.com/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20131025/9863fe29/attachment.html>