Ogero modem configuration ! help

invo

Hey Guys need some help ! been tryng to get into my DSL router for a while ... any ideas besides brutforcing ?
and if that doesnt work is there any way i can find out my router configuration without any credentials if i went the extra mile and reseted it !
DSL router : PARADYNE model number 6212

Kareem

Call your ISP, they should give it to you, tell them you need to forward ports...

euryale

^ that doesn't work , they will tell u it's prohibited and that ur going to mess things up and make them come over, try Kareem's tutorial http://www.lebgeeks.com/forums/viewtopic.php?id=5637

Aj_BlaZ

hmm or you can tell them you need to change the password of your router (wep or wap)

invo

Kareen ... i have tried that before they said exactly what euryale said
Blaz well they would change it remotly .. the only reason they dont give out the passwords for the modems cause they set the speed and the channel/server that record the bandwidth on that modem we can easily upgrade our speed and get some free bandwidth with proper manipulation :D .. but not on all modems

euryale thanks but i have tried that with noluck !ith user is still asking for a password i have tried every single default ussername and password for practically every modem brand out there still nothing

darko

telnet to 192.168.1.1

it will ask for user/pass

use user/user

dumpcfg

u'll get a big chunck of text, copy that to notepad and look for
<sysUserName value=""/> <<the text inside the "" is the admin username
and
<sysPassword value=""/> get the text inside the quotes and go here http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/ paste it and press decode, thats the admin password

This wont work for all routers, let me know what happens with u

euryale

upgrade speed and bandwidth usage via modem? o_o i don't think that this is possible cause i'm pretty sure they have equipment in they central that records everything that comes in and out, care to explain more?

Aj_BlaZ

@euryale nothing is impossible even if they can detect what you are doing
@invo if they can access to your modem they don't have the right to access to your router ???? if i were you i would start considering about privacy/passwords if they have full access to your modem/router !!

invo

euryale wroteupgrade speed and bandwidth usage via modem? o_o i don't think that this is possible cause i'm pretty sure they have equipment in they central that records everything that comes in and out, care to explain more?

they have record keeping servers and most modems comes with these options(speed/bandwidth),like in canada there is one central modem within every block you just directly connect to it via your telephone line, they do not install any hardware these modems ogero use are configurable for one
i tried switching my modem with my friend's and over his line it kept recording my data bandwidth. so it have nothing to do with line its only a mean so am guessing it have to be the modem ...

Blaz they only have access to the modem they install ... so instance i tried asking for a friend if they would change hs password encryption (Dlink Wireless modem) from wep to wpa they said sorry we cant do that so i had them disable my friends wireless and installed a wireless router for better protection

invo

darko wrotetelnet to 192.168.1.1

it will ask for user/pass

use user/user

dumpcfg

u'll get a big chunck of text, copy that to notepad and look for
<sysUserName value=""/> <<the text inside the "" is the admin username
and
<sysPassword value=""/> get the text inside the quotes and go here http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/ paste it and press decode, thats the admin password

This wont work for all routers, let me know what happens with u

already tried that bro
"incorrect login"

Aj_BlaZ

http://www.techiedesi.com/post/410-recover-adsl-router-and-modem-passwords-easily-with-adslpwd-utility try this link i didn't try nor read it 100% but his idea is nice

Kareem

If they are refusing to give you the password one thing I can think of but haven't tried yet as I don't have any reason to, is to sniff the packets on your router level. Theoretically that should work, If you disable the wifi and use only the ethernet port and capture packets on the pppoe IP level ( I guess), you can intercept the packets between the ogero support and your router.

when you setup the MITM attack and ready to launch it, drop them a call asking them to login to your router because you have no connection, you should intercept their input data and capture the password.

Seems interesting I am gonna try it on my router. Cheers.. ( if you dont have any idea about packet sniffing google that I think we are not allowed to share that kind of knowledge.. use LINUX @!# )

invo

Kareem wroteIf they are refusing to give you the password one thing I can think of but haven't tried yet as I don't have any reason to, is to sniff the packets on your router level. Theoretically that should work, If you disable the wifi and use only the ethernet port and capture packets on the pppoe IP level ( I guess), you can intercept the packets between the ogero support and your router.

when you setup the MITM attack and ready to launch it, drop them a call asking them to login to your router because you have no connection, you should intercept their input data and capture the password.

Seems interesting I am gonna try it on my router. Cheers.. ( if you dont have any idea about packet sniffing google that I think we are not allowed to share that kind of knowledge.. use LINUX @!# )

loool you know i thought about that and am good in packet sniffing so before you go gooogle and waste your time
use ettercap in linux it doesnt work wel in windows am using backtrack 3 and 4 i realy recommend it, it have everything you can wish for in terms of hacking cracking or sniffing.
one loophole in your idea is that in order to snif with ARP poising (MITM) attack you should have a gateway and a client in my case am thinking my router is the client but there is no way on earth i can find out ogero gateway used to access my router ... check out any youtube or pdf tutorial regarding sniffing cause i tried that and couldnt find a way .. thanks for the suggestion hope it works for you

invo

Aj_BlaZ wrotehttp://www.techiedesi.com/post/410-recover-adsl-router-and-modem-passwords-easily-with-adslpwd-utility try this link i didn't try nor read it 100% but his idea is nice

thanks mate but i'v tried that wired and wireless with no luck i actually tried it on several neighbors connections but thats wireless so i have no idea if that would work either ...

Kareem

invo wrote
Kareem wroteIf they are refusing to give you the password one thing I can think of but haven't tried yet as I don't have any reason to, is to sniff the packets on your router level. Theoretically that should work, If you disable the wifi and use only the ethernet port and capture packets on the pppoe IP level ( I guess), you can intercept the packets between the ogero support and your router.

when you setup the MITM attack and ready to launch it, drop them a call asking them to login to your router because you have no connection, you should intercept their input data and capture the password.

Seems interesting I am gonna try it on my router. Cheers.. ( if you dont have any idea about packet sniffing google that I think we are not allowed to share that kind of knowledge.. use LINUX @!# )
loool you know i thought about that and am good in packet sniffing so before you go gooogle and waste your time
use ettercap in linux it doesnt work wel in windows am using backtrack 3 and 4 i realy recommend it, it have everything you can wish for in terms of hacking cracking or sniffing.
one loophole in your idea is that in order to snif with ARP poising (MITM) attack you should have a gateway and a client in my case am thinking my router is the client but there is no way on earth i can find out ogero gateway used to access my router ... check out any youtube or pdf tutorial regarding sniffing cause i tried that and couldnt find a way .. thanks for the suggestion hope it works for you

Yeah i know about backtrack I've been using it since slackware etc..

about the gateway thing, i am not sure if we need it because come to thing about it, a computer is communicating with your router and you are not another PC trying to intercept the packets the switch using ARP posining, you already have access to the router... so it's not really mitm so ettercap will not really do the trick but maybe ethereal aka wireshark can help, just speculations you know.

as I said i haven't tried that but seems possible, I've been with packet interception since years and the only attack i failed to accomplish was the PPPoE one. DSL uses the pppoE protocol so it's a nightmare somehow, even with the gateway address available..