EvilZone

Hacking and Security => Beginner's Corner => : blackrat June 28, 2015, 09:28:29 AM

: Recommended way to harvest credentials ?
: blackrat June 28, 2015, 09:28:29 AM

Hello i have a question. if one have got access to a router and can log into the config page. What attack would you guys recommend to steal login credentials ?

: Re: Recommended way to harvest credentials ?
: dotszilla June 28, 2015, 11:45:01 AM

its called Man In the middle attack do some research on it.. also you can portscan the computers on the network see what they running and try to exploit it.. KALI got a buncha stuff for MitM too,  incase youre not on linux..

BUT as far as the router config page goes only thing you can really do from there is get INFORMATION.. like how many devices on the network, their ip, MAC.. you can turn off the routers firewall if it has one... stuff like that...

: Re: Recommended way to harvest credentials ?
: Trogdor June 29, 2015, 07:23:37 AM

You could do a wordlist or brute force attack, but it will certainly show up in logs. You could also sniff the network for other credentials then apply them to the router page.  There usually isn't much use in attacking a router config page, as you can gather much more info using other tools and methods.

: Re: Recommended way to harvest credentials ?
: nrael July 03, 2015, 05:46:32 PM

ARP attack. and then use wireshark or a specific tool to harvest passwords, list urls, steal cookies, change DNS servers.