Recommended way to harvest credentials ?

[blackrat]

Hello i have a question. if one have got access to a router and can log into the config page. What attack would you guys recommend to steal login credentials ?

[dotszilla]

its called Man In the middle attack do some research on it.. also you can portscan the computers on the network see what they running and try to exploit it.. KALI got a buncha stuff for MitM too,  incase youre not on linux..

BUT as far as the router config page goes only thing you can really do from there is get INFORMATION.. like how many devices on the network, their ip, MAC.. you can turn off the routers firewall if it has one... stuff like that...

[Trogdor]

You could do a wordlist or brute force attack, but it will certainly show up in logs. You could also sniff the network for other credentials then apply them to the router page.  There usually isn't much use in attacking a router config page, as you can gather much more info using other tools and methods.

[nrael]

ARP attack. and then use wireshark or a specific tool to harvest passwords, list urls, steal cookies, change DNS servers.