But how can this be used exploit a router in real life ?
minanagehsalalma opened this issue · 28 comments
Let's say that the pass and username are admin.admin
How will the DNS rebinding connect to the router page and enable the remote access .. Send us the WiFi password ..etc
Is There a video- tutorial that a one can follow ?!
@h43z
the router model is ZXHN H108N V2.5
"By making a request to the router that enables the remote access"
can't we just get the wifi password back in some sort of response messages ?
...
any way here is the remote access html page ...... the router login page
...
Dns rebinding is only needed if you need to bypass SEO and read the content of a response.
You may be able to create the appropriate requests to bruteforce, login or activate some feature of the router without SEO bypass and simply create XMLHttpRequest from javascript.
Reading the wifi password from the html or some kind of api will require you to bypass SOP.
@h43z "Reading the wifi password from the html or some kind of api will require you to bypass SEO."
can you provide more info please ?
i sent you the html file ... what's know required to enable the remote access ?
sorry i meant SOP https://en.wikipedia.org/wiki/Same-origin_policy
@h43z so how do you think i can bypass SOP to get the remote access enabled ? on that router ?
@h43z do you think this would help ?
https://github.com/mpgn/ByP-SOP
yup that's dns rebinding. (same like this repo)
You'll have to find out the request the router sends to activate it..
I hope it does. You'll have to send those request before.
@h43z "You'll have to send those request before."
Before what ?
Why are you talking in an unclear way !!!?
Can you explain more details and steps please ?
before the request to activate the remote access.
This the question how can I send them using DNS rebinding ?
the same way like without
How ??????
Why are you giving me very short and not enough answers !!!
Pls give me your email
There we go researchonyourown@gmail.com. I'm available 24/7 just for you. If you like I can remote connect and do all your work?
@h43z i have texted you !! But you still didn't answer !
Check the mail address again.
@h43z did again !
@h43z lol it seems that you are kidding me !!!!!!!!!!
research on your own ..
poor one not funny at all
@h43z as you like ...
you make a project on github and refuse to help any one that Inquires about it !
and you just have closed your very first issue .
and i think it's the last one too as it seems that no one cares about your project
and you are not nice at all 👎
enjoy your 24/7 .
Dude. You are fucking out of your mind.
You seem to have no idea what are talking about and simply want answers, tutorial videos and my email address so I can explain you step by step how to hack your neighbors router.
Then your tone of writing is like a spoiled lunatic.
You are an aggressive and annoying script kiddy that does not want to learn or take advice.
You are fucking out of your mind.
Thank you for your good morals 👎
tone of writing is like a spoiled lunatic
English isn't my mother tongue ....
tutorial videos and my email address so I can explain you step by step how to hack your neighbors router
i didn't say step by step i said more details and steps ..
"that does not want to learn or take advice"
have you offered me any reference or links to read and i said no ?!
@h43z dude i found it but i am stuck
curl "http://192.168.1.1/" -H "Connection: keep-alive" -H "Cache-Control: max-age=0" -H "Origin: http://192.168.1.1" -H "Upgrade-Insecure-Requests: 1" -H "DNT: 1" -H "Content-Type: application/x-www-form-urlencoded" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86 Safari/537.36" -H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3" -H "Referer: http://192.168.1.1/" -H "Accept-Encoding: gzip, deflate" -H "Accept-Language: en-US,en;q=0.9,ar;q=0.8" --data "frashnum=^&action=login^&Frm_Logintoken=9^&Username=admin^&Password=admin" --compressed
what ever i do i get the same wrong response
https://superuser.com/questions/1424328/why-i-cant-login-to-my-router-using-curl-d-option
i found it i found it !!!!!!!!!!!!!!