Author Topic: bypass router authentication  (Read 4452 times)

0 Members and 1 Guest are viewing this topic.

Offline hi2saif

  • NULL
  • Posts: 4
  • Cookies: -2
    • View Profile
bypass router authentication
« on: May 11, 2013, 03:59:56 pm »
Hi Guzzzz !!!

I just want to ask you that is there a way to bypass the routers authentication mechanism..

Offline RedBullAddicted

  • Moderator
  • Sir
  • *
  • Posts: 519
  • Cookies: 189
    • View Profile
Re: bypass router authentication
« Reply #1 on: May 11, 2013, 04:07:06 pm »
Can you please be a bit more specific? What do you mean with router authentication mechanism? You want to login to the administration web-interface, ssh to a router, 802.1X, wireless? What type of router, software and so on :)

So far I just can say: yes... I am sure there is a way to bypass the router authentication mechanism. You just need to find it :) Most important thing is to have fun and don't give up to fast.
Deep into that darkness peering, long I stood there, wondering, fearing, doubting, dreaming dreams no mortal ever dared to dream before. - Edgar Allan Poe

Offline hi2saif

  • NULL
  • Posts: 4
  • Cookies: -2
    • View Profile
Re: bypass router authentication
« Reply #2 on: May 11, 2013, 05:43:19 pm »
Here is the screenshot of the mechanism I was talking about......


I hope this will help u to answer my question

Offline namespace7

  • Sir
  • ***
  • Posts: 561
  • Cookies: 115
  • My Brother's Keeper
    • View Profile
Re: bypass router authentication
« Reply #3 on: May 11, 2013, 08:32:53 pm »
Yes there is.
You could try the default passwords as a lot of people never change the defaults.
http://www.routerpasswords.com/

If that doesn't work, then you could try to crack the logon and hope the user did not make a long complex password.
Lots of tools to help with that like Hydra: http://www.thc.org/thc-hydra/
"A programmer’s greatest enemy isn’t the tools or the boss or the artists or the design or the legacy code or the third party code or the API or the OS. A programmer’s greatest enemy is getting stuck.
Therefore a crucial step to becoming a better programmer is learning how to avoid getting stuck, to recognize when you’re stuck, and to get unstuck." -Jeff Wofford

Offline Evilone

  • /dev/null
  • *
  • Posts: 16
  • Cookies: 14
    • View Profile
Re: bypass router authentication
« Reply #4 on: May 11, 2013, 09:21:12 pm »
This is called HTTP BASIC Authentication. I doubt it will work on most routers but another attack to bypass these sorts of prompts is to do HTTP Verb Tampering and changing your GET request to another type of request (not POST) which will sometimes bypass the authentication if it is only attempting to force authentication for HTTP GET and HTTP POST

Offline AnarchyAngel

  • Peasant
  • *
  • Posts: 50
  • Cookies: 1
  • mmmm beer
    • View Profile
Re: bypass router authentication
« Reply #5 on: May 15, 2013, 09:14:26 pm »
What is it you are trying to do? Just forward some ports or something else?
https://dc414.org - MKE area DEFCON group

k0f33

  • Guest
Re: bypass router authentication
« Reply #6 on: March 30, 2014, 06:22:25 am »
herez a hydra example to try,
change the directories for your
admin/wordlist list plus the ip:
Code: [Select]
hydra 192.168.1.1 -L /media/f1lez/Listz/users -P /media/f1lez/Listz/10kcommonz.txt -t 2 -e ns -f http-get /index.asp
k0f33


Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: bypass router authentication
« Reply #7 on: March 30, 2014, 06:56:17 am »
Thread is old as SHIT.

/
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python