Skip to content

README.rst

Latest commit

 

History

History
50 lines (34 loc) · 1.25 KB

README.rst

File metadata and controls

50 lines (34 loc) · 1.25 KB

routerscan

This repository contains simple scanners developed for http://fajny.net.pl

It's not about attacking, but rather identifying affected home routers. After detecting, steps like firewalling or reconfiguration should be taken in order to protect clients against various vulnerabilities.

We will put here more checks if new attacks are discovered.

rom0rpscan (rom-0/rpFWUpload.html)

Simple scan for rom-0/rpFWUpload.html vulnerabilities found on popular home routers like:

  • TD-W8951ND
  • TD-W8961ND
  • TD-W8901G
  • TD-8816
  • D-Link DSL-2640R
  • ADSL Modem
  • AirLive WT-2000ARM
  • Pentagram Cerberus P 6331-42
  • ZTE ZXV10 W300

Attack allows to decode firmware, discover password and as a consequence modify DNS servers and e.g. redirect to fake bank website.

More info:

  1. https://github.com/MrNasro/zynos-attacker/
  2. http://niebezpiecznik.pl/post/dziura-w-routerach-z-firmwarem-zyxel-a-m-in-tp-link/ (Polish)

Installation

Just install requirements:

pip install -r requirements.txt

Example Usage

python rom0rpscan.py `cat ip_adresses|xargs` > scan.log

As this tool is intended for ISP, not for attackers, assumption has been made that list of hosts to scan is well known.