RCA DCM425 Cable Modem - micro_httpd Denial of Service (PoC)

RCA DCM425 Cable Modem - microhttpd Denial of Service PoC !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis [email protected] Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device...

RCA DCM425 Cable Modem micro_httpd DoS/PoC

Exploit for unknown platform in category dos / poc ========================================== RCA DCM425 Cable Modem microhttpd DoS/PoC ========================================== !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis Info: This script caus...

RCA DCM425 Cable Modem - 'micro_httpd' Denial of Service (PoC)

!/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis [email protected] Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device after a few seconds of it freezing up. I believe this may le...

Huawei HG510 CSRF, Auth Bypass, DoS

Hello, Huawei HG510 is a device offered by the Serbian telecom operator, to provide ADSL Internet connection. Administration of settings on this device is allowed only from local LAN network but not only from private IP address eg 192.168.1.1 then You can access with public IP address only from...

Mandriva Update for drakxtools MDVA-2010:035-1 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:035-1 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Mandriva Update for drakxtools MDVA-2010:035-1 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:035-1 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Test Dialup Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Test Dialup...

Colombian ISP - ETB Modem Issue

I've recently discovered a security hole on the modems which double as routers used by a Colombian ISP - ETB. It so happens that all incoming connections to an IP address on said ISP on port 23 or port 80 land on the modem instead of the computers connected to it. Even if one tries to redirect...

Huawei MT882 Modem/Router Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================== Huawei MT882 Modem/Router Multiple Vulnerabilities ================================================== Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Target device ip 10.0.0.2:80...

Huawei MT882 Modem/Router - Multiple Vulnerabilities

Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

ISPs Leave Modems Open to DDoS Attacks

Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet’s DNS, making it easier for hackers to launch DDoS attacks against their victims. According to research, part of the problem is blamed on the growing number of consumer devic...

Guilt by Association: Modem Hacker Arrested for Others' Crimes

Hardware hacker and author, Ryan Harris, aka “DerEngel,” has been arrested in Boston for aiding and abetting intrusion and wire fraud. Harris oversees TCNiSO, a group who hacks cable modems and other hardware. Harris thinks he is being busted for the plights of those who took performance-boosting...

2WIRE Remote Denial Of Service Proof Of Concept

print "\n " print " 2WIRE REMOTE DoS FW = python 2os.py 123.123.123.123\n" sys.exit if not lenip.split"." == 4: print " IP ERROR - python 2os.py 123.123.123.123\n" sys.exit print " Detectando el dispositivo" try: server =...

2WIRE Router 5.29.52 - Remote Denial of Service

2WIRE Router 5.29.52 - Remote Denial of Service """ ======================================== 2WIRE REMOTE DENIAL OF SERVICE ======================================== Device: 2wire Gateway Router/Modem Vulnerable Software: 5.29.52 Vulnerable Models: 1700HG 1701HG 1800HW 2071 2700HG 2701HG-T Release...

2WIRE Router 5.29.52 - Remote Denial of Service

""" ======================================== 2WIRE REMOTE DENIAL OF SERVICE ======================================== Device: 2wire Gateway Router/Modem Vulnerable Software: :50001/xslt?page=%0d%0a WORKAROU...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'System V Derived...

On the Evil Maid USB Attack, Time Warner and the Cybersecurity Czar

Dennis Fisher and Ryan Naraine discuss the Evil Maid USB attack, the Time Warner modem vulnerability and that old standby: the cybersecurity czar. Download SHOW NOTES: How to Defeat Full-Disk Encryption in One Minute Time Warner Router Flaw Exposes Customers Apathy Creeps In as Cybersecurity Czar...

CVE-2008-7115

The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...

Authentication flaw

The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...

CVE-2008-7115

The CVE-2008-7115 entry documents a remote-authentication bypass against Belkin Wireless G Router/F5D7632-4V6 (firmware 6.01.08). The vulnerability allows an attacker to bypass login and gain administrator privileges by directly requesting one of three CGI binaries: statusprocess.exe, system_all....