Bypassing a router's administrator password.

[dezaxat]

Hello, ppl. I'm a random guy who haven't hacked a thing in his life. I'm working all over the country and i'm forced to deal with all kind of crappy internet connection, mostly because there are too many ppl checked in motels and the host have a 100 mb/s ISP connection, which divided to 20-30 ppl results a shit. I'm over with it cuz i spend my freakin' weeks like that. The only thing i want is to get in to a damn router and change the wi-fi password or kick ppl out from the connection, etc. How can i do that if the guy have changed his router password on the administrator user and i'm stuck with the read-only user to log-in to his router. Is there anyway i could bypass the password for administrator privileges? I can't watch even a damn youtube video because the connection is too slow. Most of the routers used in my country are TP-Links, D-Link, Asus maybe, ZTS. Pretty much standard ones. I would really appreciate if you could help me. Ty for reading. Take care.
LE: What if the router i'm trying to hack in to has receives internet from another one? Like linked to have a a better wi-fi signal to an upper floor. Does it changes anything?
Factory resetting a router deletes any changes you've made in to? Like maybe the guy have a port forword for security cameras or dmz for same thing. I don't wanna fuck everything up. Just kick ppl out or change the password so i have internet cuz i'm living anywhere else except home these days. I'm not expecting to give me full tutorials or translate them to me. If you can, just give me a link where i can find things easy to understand and i'll read.


And as i final add. I'm connected to their router by wireless with a laptop, running windows, not linux or whatever. Is it a problem? I might need to take a UTP with me and sneak to the router to get that kind of access?

[dotszilla]

you can try dict attack, you'd be surprised how many people dont change the default user and password, especially the user..
here some tutorial you can look at..

http://nathanheafner.com/home/2014/03/19/cracking-my-routers-web-login-page-with-hydra-login-cracker/

and check this out, if you find out their ip which can be done with ping or nmap, considering they using windows this might work.. check the first answer..

https://answers.yahoo.com/question/index?qid=20100907192307AASKPRk

or get their ip address and DOS them to knock em off, but unless you got a botnet or something wont be very successful since you can only do one pc at a time..

http://sourceforge.net/projects/loic/

P.S this all hypothetical, i wouldn't do any of it...

[khofo]

you can try dict attack, you'd be surprised how many people dont change the default user and password, especially the user..
here some tutorial you can look at..

http://nathanheafner.com/home/2014/03/19/cracking-my-routers-web-login-page-with-hydra-login-cracker/

and check this out, if you find out their ip which can be done with ping or nmap, considering they using windows this might work.. check the first answer..

https://answers.yahoo.com/question/index?qid=20100907192307AASKPRk

or get their ip address and DOS them to knock em off, but unless you got a botnet or something wont be very successful since you can only do one pc at a time..

http://sourceforge.net/projects/loic/

P.S this all hypothetical, i wouldn't do any of it...

Dotszilla,


you may not be aware of this, and I know your intentions are good and want to contribute.
But we do not spoonfeed skids here, because feeding one would bring the whole cattle.
So just don't do it, this guy obviously has no interest in learning and think we are some kind of hit squad to do his research and solve his problem, once you answer this kinda questions the guy will get the answer and fly away

[dotszilla]

Dotszilla,


you may not be aware of this, and I know your intentions are good and want to contribute.
But we do not spoonfeed skids here, because feeding one would bring the whole cattle.
So just don't do it, this guy obviously has no interest in learning and think we are some kind of hit squad to do his research and solve his problem, once you answer this kinda questions the guy will get the answer and fly away

OHHH, i see... yeah like you said i just try to help people thats why i direct them some where they can learn, even though i did get all those links from google in about 5 min of research... but youre totally right, i just noticed it was his first post and will probably be last unless he comes back to tell me hydra doesnt "WORK" lmao..  anyways ill stop spoon feeding  the skids, ill let HF take care of the skidss from now on.... lol

[dezaxat]

Maybe i'll will, maybe i won't. Maybe i've read the forum few hours last night, maybe i've posted my topic and went watching TV. Maybe you are totally off-topic with everything you've said so far, maybe not.
As far as i haven't done anything related to hacking, i've asked because i don't know where to start from. I've already tried something for the past couple of days. I have'n came here and ask you ppl something without alteady trying.
I've done some research and i've found some kind of attacks, which were "POST". Got a extension for chrome and tried to post that 368116488 million ways, didn't worked. I tried that link which changes the router password only IF the administrator is logged in with his privileges. But guess what? Nobody said that the administrator has to click it, i've read that on this damn forum. And now is kinda too late to ask the guy his e-mail to trap him into clicking it cuz monday i'm gonna leave this city and go somewhere else.
So before you start on judging ppl around, you would consider shutting up.
Ty Dotszilla, i'm goin' to do my research and i'll post back later, even though i've succeded or not.

[iTpHo3NiX]

Khofo,

There's nothing wrong with the question/answer. Although skiddish, at least we'll be able to point future Posts on this topic here. There are far worse threads to pick on.

@op
Check out routerpwn (google) or check exploitdb to see if there's a vulnerability to exploit on the router. What would help is if you knew what router. You can actually use the modified reaver for pixiewps if wps is enabled as it will give you the manufacturer/model/chipset.

Brute force may end up being your only option, but knowing the router manufacterer/model would be helpful information

[dezaxat]

I do indeed know the manufacturer cuz i am connected on wi-fi on this router. I pretty much have on my hands few infos, cuz when you check in on a motel, they give you their wi-fi password. I can aswell enter on the log-in page but can't modify anything cuz i don't know the admin password. Usually, ppl that have motels change it from the default one. Ok, i'll start up from here, learn more about this brute force entry.
LE: To get into hacking, maybe it'll became something i like to do, i need a pretty good laptop? I mean configs. Or even a dual core would do the thing? I've read that for brute force, i need kinda good stuff in there, at least if i don't want to wait days to get a password, am i right?

[horusffs]

Hello, to begin, people is giving you too much stuff you are going to end confused.

Here is the deal, some routers block you after trying many times the login page.
If you just want to kick people from the connection it's very simple.
I am pretty sure that you have an smartphone (android to be specific), it needs to be rooted aswell.
Get into google or xda-developers and download an app called Wi-Fi Kill, I already used this before anf it worked.

So I am going to hope that it works with you aswell.
Good luck and have a nice day.

[dezaxat]

Hello, to begin, people is giving you too much stuff you are going to end confused.

Here is the deal, some routers block you after trying many times the login page.
If you just want to kick people from the connection it's very simple.
I am pretty sure that you have an smartphone (android to be specific), it needs to be rooted aswell.
Get into google or xda-developers and download an app called Wi-Fi Kill, I already used this before anf it worked.

So I am going to hope that it works with you aswell.
Good luck and have a nice day.

Yes, yes, yes and yes. I definetly try this one out. Ty for the post.

[horusffs]

Yes, yes, yes and yes. I definetly try this one out. Ty for the post.

Good luck with it. If you need anything else just let me know.

[dotszilla]

Yes, yes, yes and yes. I definetly try this one out. Ty for the post.

just dont forget that, you can kick people off as much as you want, all it takes is about 2 minutes for them to sign back on... which kinda defeats the purpose of what you want to accomplish, you need to block their MAC add from the router to keep em out...
honestly for someone with as much experience as you i would just recommend getting a 4g AP for like 30 bucks a month... theres more to hacking than just using a program to kick someone out, youll never accomplish much unless you know exactly what that program is doing how and why its doing it, and understanding the TCP/IP protocol and its layers wouldnt hurt either...

[dezaxat]

just dont forget that, you can kick people off as much as you want, all it takes is about 2 minutes for them to sign back on... which kinda defeats the purpose of what you want to accomplish, you need to block their MAC add from the router to keep em out...
honestly for someone with as much experience as you i would just recommend getting a 4g AP for like 30 bucks a month... theres more to hacking than just using a program to kick someone out, youll never accomplish much unless you know exactly what that program is doing how and why its doing it, and understanding the TCP/IP protocol and its layers wouldnt hurt either...

Yep, i know about that MAC Filtering. But i need the password for the router which is throwing me to phase 1. That 4g AP in my country doesn't exists. Except for a limit of 13 gb/month. I'll do my research to get in to other things that using a program.

[toolbox331]

Well it seems my previous post was locked, apologies for the mess that the topic caused and thank you all for the suggestions. Once again sorry..