SlideShare a Scribd company logo
1 of 25
Download to read offline
Hacking Linksys WRT54g Wireless
             Router
                         Milan Milosevic
                               Group Members:

AJAYI Temitope Omotosho, BOYINBODE, Olutayo Kehinde, SALEHIN, Asif Gazi,
Lajpat Dhingra, Maheshwari Hitesh Kumar, Timothy Chadza, Purna Bahadur Roka,
    Anna Zakrzewska, OLAJUYIGBE, Ebenezer Oluwaseun, Giorgi Gvianishvili




                       ICTP. Trieste, Italy – February 13, 2008
Tasks:

    1. To configure a Linksys router as an Access
●

    Point using basic configurations. Easy !


    2. To discover the settings of a Linksys router
●

    configured with unknown settings


    3. To upgrade the firmware of a LinkSys router
●

    and consequently configure it as a client
Ideas:
    Try it regular way?
●




    Brute force?
●




    Use Google !
●




    http://www.linksysinfo.org/forums/showthread.php?t=47259
Warning !


    this WILL void your warranty
●




    you could make your WRT54G even deader
●

    than it already is
We can start:
    locate the flash chip
●


    at each corner of the chip is a large white
●

    number
    little white line every 5 pins that should help you
●

    count
    Do not plug the power in just yet
●


    Plug a patch cable into one of the 4 LAN ports
●
Configure your network


    IP: 192.168.1.2
●


    NETMASK: 255.255.255.0
●


    don't need a gateway address
●


    ping 192.168.1.1
●
Do it !
    Locate pin 15
●


    Stick the point between pins 15 and 16
●


    Plug in the power and watch your ping screen
●


    Pings starting to succeed     theory !
●




        Try it again... and again... and again...
Different solution?

    Unplug power
●


    Ground pin 16
●


    Plug it again
●




        Try it again... and again... and again...
Dinner time :)
Forget everything ! ! !

           and
                 st
Get back to the 1 idea ! ! !
The Solution:
# /sbin/ifconfig eth0
# /sbin/dhcpclient eth0

or

# ln -s /sbin/ifconfig ifconfig

     Do not plug the power in just yet
–
     Plug a patch cable into one of the 4 LAN ports
–
     Configure the network:
–
                                           [root@localhost media]# dhcpclient eth0
       Use DHCP
–
                          #dhclient eth0   [root@localhost media]# ifconfig eth0
                                           eth0     Link encap:Ethernet HWaddr 00:0C:6E:13:01:06
                                                  inet addr:192.168.1.188 Bcast:10.1.1.255
                                           Mask:255.255.255.0
                                                  inet6 addr: fe80::20c:6eff:fe13:106/64 Scope:Link
                                                  UP BROADCAST RUNNING MULTICAST MTU:1500
                                           Metric:1
                                                  RX packets:584152 errors:0 dropped:0 overruns:0
                                           frame:0
                                                  TX packets:508898 errors:0 dropped:2 overruns:0
                                           carrier:0
                                                  collisions:0 txqueuelen:1000
                                                  RX bytes:745903995 (711.3 MiB) TX bytes:44541763
                                           (42.4 MiB)
                                                  Interrupt:19 Base address:0x8800
So easy !


  The default gateway is the IP address of the
●

router

    it was 192.168.1.20
●




 We logged in the router and changed the
●

necessary configuration
Tasks:

    1. To configure a Linksys router as an Access
●

    Point using basic configurations. Easy !


    2. To discover the settings of a Linksys router
●

    configured with unknown settings
                                          At the end
                                             EASY
    3. To upgrade the firmware of a LinkSys router
●

    and consequently configure it as a client
Next Task




To upgrade the firmware of a LinkSys router and
     consequently configure it as a client
DD-WRT is a typical free Linux- based firmware
●

originally designed to work on Linksys WRT54G

    Download of the DD – WRT firmware:
●



       http://www.dd-wrt.com/dd-wrtv2/downloads/stable/dd-wrt.v23

    There are several files – use dd-wrt.v23_sp2_vpn
●
Unzip
●




    You will discover 9 files; which one is required?
●




    Only need the bin file dd-wrt.v23_vpn_generic
●




    Use web interface
●




    Find option for upgrading
●




  Browse the folder you downloaded and click to
●

the bin file and start the upgrade
now wait for about 5 or more minutes
●


    but how long?
●




    Note that any disturbance can blow off your
●

    router


    we closed the window
●




    using the previous IP address 192.168.1.20 we
●

    had our router upgraded
Finally we required user and admin password
●




    We simply did a hardware reset and obtained
●

    the default User: root with password: admin


    Now you are done and can move to the next
●

    step.
References

    http://www.dd-wrt.com/dd-wrtv2/down.php?path=downloads
●

    %2Fstable%2Fdd-wrt.v23+SP2/


    http://en.wikipedia.org/wiki/DD-WRT
●




    http://www.dd-wrt.com/wiki/index.php/Installation
●

More Related Content

What's hot

How to connect to cisco asa
How to connect to cisco asaHow to connect to cisco asa
How to connect to cisco asa
IT Tech
 
Uccn1003 -may10_-_lect02b1_-_lan_basic_in_packet_tracer
Uccn1003  -may10_-_lect02b1_-_lan_basic_in_packet_tracerUccn1003  -may10_-_lect02b1_-_lan_basic_in_packet_tracer
Uccn1003 -may10_-_lect02b1_-_lan_basic_in_packet_tracer
Shu Shin
 
Sop Setting Ubiquiti
Sop Setting UbiquitiSop Setting Ubiquiti
Sop Setting Ubiquiti
maruf satrio
 
Mikro tik nstreme-protocol
Mikro tik nstreme-protocolMikro tik nstreme-protocol
Mikro tik nstreme-protocol
backtrack78
 
Ukk tkj p1 proxy mikrotik2014 2015
Ukk tkj p1 proxy mikrotik2014 2015Ukk tkj p1 proxy mikrotik2014 2015
Ukk tkj p1 proxy mikrotik2014 2015
Riza Hafizhuddin
 

What's hot (20)

Example for configuring local attack defense
Example for configuring local attack defenseExample for configuring local attack defense
Example for configuring local attack defense
 
SR-IOV benchmark
SR-IOV benchmarkSR-IOV benchmark
SR-IOV benchmark
 
Using the cisco console in linux
Using the cisco console in linux Using the cisco console in linux
Using the cisco console in linux
 
Default routing
Default routingDefault routing
Default routing
 
How to connect to cisco asa
How to connect to cisco asaHow to connect to cisco asa
How to connect to cisco asa
 
Huawei ARG3 Router How To - Troubleshooting OSPF: Router ID Confusion
Huawei ARG3 Router How To - Troubleshooting OSPF: Router ID ConfusionHuawei ARG3 Router How To - Troubleshooting OSPF: Router ID Confusion
Huawei ARG3 Router How To - Troubleshooting OSPF: Router ID Confusion
 
Uccn1003 -may10_-_lect02b1_-_lan_basic_in_packet_tracer
Uccn1003  -may10_-_lect02b1_-_lan_basic_in_packet_tracerUccn1003  -may10_-_lect02b1_-_lan_basic_in_packet_tracer
Uccn1003 -may10_-_lect02b1_-_lan_basic_in_packet_tracer
 
Konfigurasi DHCP Nano Station
Konfigurasi DHCP Nano StationKonfigurasi DHCP Nano Station
Konfigurasi DHCP Nano Station
 
Network
NetworkNetwork
Network
 
4.1.2.9 packet tracer documenting the network instructions
4.1.2.9 packet tracer   documenting the network instructions4.1.2.9 packet tracer   documenting the network instructions
4.1.2.9 packet tracer documenting the network instructions
 
Sop Setting Ubiquiti
Sop Setting UbiquitiSop Setting Ubiquiti
Sop Setting Ubiquiti
 
CISCO (NAI) System
CISCO (NAI) SystemCISCO (NAI) System
CISCO (NAI) System
 
Communication & switching networks lab manual
Communication & switching networks lab manualCommunication & switching networks lab manual
Communication & switching networks lab manual
 
Cisco router basic
Cisco router basicCisco router basic
Cisco router basic
 
Huawei ARG3 Router How To - Troubleshooting OSPF: Netmask mismatch
Huawei ARG3 Router How To - Troubleshooting OSPF: Netmask mismatchHuawei ARG3 Router How To - Troubleshooting OSPF: Netmask mismatch
Huawei ARG3 Router How To - Troubleshooting OSPF: Netmask mismatch
 
Mikro tik nstreme-protocol
Mikro tik nstreme-protocolMikro tik nstreme-protocol
Mikro tik nstreme-protocol
 
Huawei S5700 Basic Configuration Command
Huawei S5700 Basic Configuration CommandHuawei S5700 Basic Configuration Command
Huawei S5700 Basic Configuration Command
 
Ukk tkj p1 proxy mikrotik2014 2015
Ukk tkj p1 proxy mikrotik2014 2015Ukk tkj p1 proxy mikrotik2014 2015
Ukk tkj p1 proxy mikrotik2014 2015
 
List of usernames and passwords for Huawei routers
List of usernames and passwords for Huawei routersList of usernames and passwords for Huawei routers
List of usernames and passwords for Huawei routers
 
Step by Step guide to set up a simple network in Packet Tracer
Step by Step guide to set up a simple network in Packet TracerStep by Step guide to set up a simple network in Packet Tracer
Step by Step guide to set up a simple network in Packet Tracer
 

Viewers also liked

How to 华为hg255d无需超级密码完美破解 - 小不的记事本
How to 华为hg255d无需超级密码完美破解 - 小不的记事本How to 华为hg255d无需超级密码完美破解 - 小不的记事本
How to 华为hg255d无需超级密码完美破解 - 小不的记事本
fuwotest123
 

Viewers also liked (15)

Astronomsko društvo ALFA
Astronomsko društvo ALFAAstronomsko društvo ALFA
Astronomsko društvo ALFA
 
Supernove - na kraju je opet pocetak (2. deo)
Supernove - na kraju je opet pocetak (2. deo)Supernove - na kraju je opet pocetak (2. deo)
Supernove - na kraju je opet pocetak (2. deo)
 
Pomracenje Sunca - 29. mart 2006
Pomracenje Sunca - 29. mart 2006Pomracenje Sunca - 29. mart 2006
Pomracenje Sunca - 29. mart 2006
 
How to 华为hg255d无需超级密码完美破解 - 小不的记事本
How to 华为hg255d无需超级密码完美破解 - 小不的记事本How to 华为hg255d无需超级密码完美破解 - 小不的记事本
How to 华为hg255d无需超级密码完美破解 - 小不的记事本
 
WRT Introduction P11 2009
WRT Introduction P11 2009WRT Introduction P11 2009
WRT Introduction P11 2009
 
Web School ERP User Manual
Web School ERP User ManualWeb School ERP User Manual
Web School ERP User Manual
 
Kako zive zvezde
Kako zive zvezdeKako zive zvezde
Kako zive zvezde
 
Internet: Istina je tamo negde
Internet: Istina je tamo negdeInternet: Istina je tamo negde
Internet: Istina je tamo negde
 
Astronomska inflacija
Astronomska inflacijaAstronomska inflacija
Astronomska inflacija
 
Nobelova nagrada za fiziku za 2012. godinu
Nobelova nagrada za fiziku za 2012. godinuNobelova nagrada za fiziku za 2012. godinu
Nobelova nagrada za fiziku za 2012. godinu
 
Astronomija online
Astronomija onlineAstronomija online
Astronomija online
 
Free softver, znanje i astronomija
Free softver, znanje i astronomijaFree softver, znanje i astronomija
Free softver, znanje i astronomija
 
Project 1 PPT Presentation
Project 1 PPT Presentation Project 1 PPT Presentation
Project 1 PPT Presentation
 
Setting Ap Dd Wrt
Setting Ap Dd WrtSetting Ap Dd Wrt
Setting Ap Dd Wrt
 
Новинки «1С-Битрикс: Управление сайтом» 16.5
Новинки «1С-Битрикс: Управление сайтом» 16.5Новинки «1С-Битрикс: Управление сайтом» 16.5
Новинки «1С-Битрикс: Управление сайтом» 16.5
 

Similar to Hacking Linksys Wrt54g

Similar to Hacking Linksys Wrt54g (20)

Information Theft: Wireless Router Shareport for Phun and profit - Hero Suhar...
Information Theft: Wireless Router Shareport for Phun and profit - Hero Suhar...Information Theft: Wireless Router Shareport for Phun and profit - Hero Suhar...
Information Theft: Wireless Router Shareport for Phun and profit - Hero Suhar...
 
14 network tools
14 network tools14 network tools
14 network tools
 
Linux router
Linux routerLinux router
Linux router
 
Linux network tools (Maarten Blomme)
Linux network tools (Maarten Blomme)Linux network tools (Maarten Blomme)
Linux network tools (Maarten Blomme)
 
SR-IOV+KVM on Debian/Stable
SR-IOV+KVM on Debian/StableSR-IOV+KVM on Debian/Stable
SR-IOV+KVM on Debian/Stable
 
Simple network troubleshooting
Simple network troubleshootingSimple network troubleshooting
Simple network troubleshooting
 
Open stack advanced_part
Open stack advanced_partOpen stack advanced_part
Open stack advanced_part
 
Linux Networking Explained
Linux Networking ExplainedLinux Networking Explained
Linux Networking Explained
 
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/StableSR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
SR-IOV, KVM and Intel X520 10Gbps cards on Debian/Stable
 
SR-IOV, KVM and Emulex OneConnect 10Gbps cards on Debian/Stable
SR-IOV, KVM and Emulex OneConnect 10Gbps cards on Debian/StableSR-IOV, KVM and Emulex OneConnect 10Gbps cards on Debian/Stable
SR-IOV, KVM and Emulex OneConnect 10Gbps cards on Debian/Stable
 
Handy Networking Tools and How to Use Them
Handy Networking Tools and How to Use ThemHandy Networking Tools and How to Use Them
Handy Networking Tools and How to Use Them
 
Fundamentals of network hacking
Fundamentals of network hackingFundamentals of network hacking
Fundamentals of network hacking
 
IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013IPv6 Security - Hacker Halted 2013
IPv6 Security - Hacker Halted 2013
 
Tesla Hacking to FreedomEV
Tesla Hacking to FreedomEVTesla Hacking to FreedomEV
Tesla Hacking to FreedomEV
 
SAS (Secure Active Switch)
SAS (Secure Active Switch)SAS (Secure Active Switch)
SAS (Secure Active Switch)
 
Run Run Trema Test
Run Run Trema TestRun Run Trema Test
Run Run Trema Test
 
Ghosterr
GhosterrGhosterr
Ghosterr
 
Understanding Open vSwitch
Understanding Open vSwitch Understanding Open vSwitch
Understanding Open vSwitch
 
SDNDS.TW Mininet
SDNDS.TW MininetSDNDS.TW Mininet
SDNDS.TW Mininet
 
Ripe71 FastNetMon open source DoS / DDoS mitigation
Ripe71 FastNetMon open source DoS / DDoS mitigationRipe71 FastNetMon open source DoS / DDoS mitigation
Ripe71 FastNetMon open source DoS / DDoS mitigation
 

More from Milan Milošević

More from Milan Milošević (20)

Inflacija, crne rupe i Fizika u Nišu
Inflacija, crne rupe i Fizika u NišuInflacija, crne rupe i Fizika u Nišu
Inflacija, crne rupe i Fizika u Nišu
 
Observational tests of Tachyonic and Holographic Models of Inflation
Observational tests of Tachyonic and Holographic Models of InflationObservational tests of Tachyonic and Holographic Models of Inflation
Observational tests of Tachyonic and Holographic Models of Inflation
 
Kako smo videli nevidljivo - od crne rupe do Nobelove nagrade za fiziku
Kako smo videli nevidljivo - od crne rupe do Nobelove nagrade za fizikuKako smo videli nevidljivo - od crne rupe do Nobelove nagrade za fiziku
Kako smo videli nevidljivo - od crne rupe do Nobelove nagrade za fiziku
 
Sunce - zvezda iz Sunčevog sistema
Sunce - zvezda iz Sunčevog sistemaSunce - zvezda iz Sunčevog sistema
Sunce - zvezda iz Sunčevog sistema
 
Observational parameters of Inflation in Holographic cosmology
Observational parameters of Inflation in Holographic cosmologyObservational parameters of Inflation in Holographic cosmology
Observational parameters of Inflation in Holographic cosmology
 
Numerical inflation: simulation of observational parameters
Numerical inflation: simulation of observational parametersNumerical inflation: simulation of observational parameters
Numerical inflation: simulation of observational parameters
 
Od crne rupe do Nobelove nagrade za fiziku
Od crne rupe do Nobelove nagrade za fizikuOd crne rupe do Nobelove nagrade za fiziku
Od crne rupe do Nobelove nagrade za fiziku
 
Od velikog praska do Nobelove nagrade za fiziku za 2019. godinu
Od velikog praska do Nobelove nagrade za fiziku za 2019. godinuOd velikog praska do Nobelove nagrade za fiziku za 2019. godinu
Od velikog praska do Nobelove nagrade za fiziku za 2019. godinu
 
Evolucija zvezda i nastanak crnih rupa - kako smo videli nevidljivo
Evolucija zvezda i nastanak crnih rupa - kako smo videli nevidljivoEvolucija zvezda i nastanak crnih rupa - kako smo videli nevidljivo
Evolucija zvezda i nastanak crnih rupa - kako smo videli nevidljivo
 
Kako videti nevidljivo? - prva fotografija crne rupe
Kako videti nevidljivo? - prva fotografija crne rupeKako videti nevidljivo? - prva fotografija crne rupe
Kako videti nevidljivo? - prva fotografija crne rupe
 
Kako preživeti internet?
Kako preživeti internet?Kako preživeti internet?
Kako preživeti internet?
 
CERN mesto gde je nastao "internet"
CERN mesto gde je nastao "internet"CERN mesto gde je nastao "internet"
CERN mesto gde je nastao "internet"
 
Kako je svet postao globalno selo?
Kako je svet postao globalno selo?Kako je svet postao globalno selo?
Kako je svet postao globalno selo?
 
NETCHEM CPD: Audio prezentovanje jednosmerna i dvosmerna komunikacija
NETCHEM CPD: Audio prezentovanje jednosmerna i dvosmerna komunikacijaNETCHEM CPD: Audio prezentovanje jednosmerna i dvosmerna komunikacija
NETCHEM CPD: Audio prezentovanje jednosmerna i dvosmerna komunikacija
 
NETCHEM CPD: Video konferencijsko povezivanje
NETCHEM CPD: Video konferencijsko povezivanjeNETCHEM CPD: Video konferencijsko povezivanje
NETCHEM CPD: Video konferencijsko povezivanje
 
Fizika mobilnog telefona
Fizika mobilnog telefonaFizika mobilnog telefona
Fizika mobilnog telefona
 
30 godina World Wide Web-a
30 godina World Wide Web-a30 godina World Wide Web-a
30 godina World Wide Web-a
 
"Svet nauke" o svetu nauke
"Svet nauke" o svetu nauke"Svet nauke" o svetu nauke
"Svet nauke" o svetu nauke
 
NETCHEM Forum
NETCHEM ForumNETCHEM Forum
NETCHEM Forum
 
Overview of collected WARIAL data from NETCHEM consortium
Overview of collected WARIAL data from NETCHEM consortiumOverview of collected WARIAL data from NETCHEM consortium
Overview of collected WARIAL data from NETCHEM consortium
 

Recently uploaded

Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
WSO2
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 

Recently uploaded (20)

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamDEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Introduction to Multilingual Retrieval Augmented Generation (RAG)
Introduction to Multilingual Retrieval Augmented Generation (RAG)Introduction to Multilingual Retrieval Augmented Generation (RAG)
Introduction to Multilingual Retrieval Augmented Generation (RAG)
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdfRising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
 
Architecting Cloud Native Applications
Architecting Cloud Native ApplicationsArchitecting Cloud Native Applications
Architecting Cloud Native Applications
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...
 
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ..."I see eyes in my soup": How Delivery Hero implemented the safety system for ...
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 

Hacking Linksys Wrt54g

  • 1. Hacking Linksys WRT54g Wireless Router Milan Milosevic Group Members: AJAYI Temitope Omotosho, BOYINBODE, Olutayo Kehinde, SALEHIN, Asif Gazi, Lajpat Dhingra, Maheshwari Hitesh Kumar, Timothy Chadza, Purna Bahadur Roka, Anna Zakrzewska, OLAJUYIGBE, Ebenezer Oluwaseun, Giorgi Gvianishvili ICTP. Trieste, Italy – February 13, 2008
  • 2. Tasks: 1. To configure a Linksys router as an Access ● Point using basic configurations. Easy ! 2. To discover the settings of a Linksys router ● configured with unknown settings 3. To upgrade the firmware of a LinkSys router ● and consequently configure it as a client
  • 3. Ideas: Try it regular way? ● Brute force? ● Use Google ! ● http://www.linksysinfo.org/forums/showthread.php?t=47259
  • 4.
  • 5. Warning ! this WILL void your warranty ● you could make your WRT54G even deader ● than it already is
  • 6.
  • 7. We can start: locate the flash chip ● at each corner of the chip is a large white ● number little white line every 5 pins that should help you ● count Do not plug the power in just yet ● Plug a patch cable into one of the 4 LAN ports ●
  • 8. Configure your network IP: 192.168.1.2 ● NETMASK: 255.255.255.0 ● don't need a gateway address ● ping 192.168.1.1 ●
  • 9. Do it ! Locate pin 15 ● Stick the point between pins 15 and 16 ● Plug in the power and watch your ping screen ● Pings starting to succeed theory ! ● Try it again... and again... and again...
  • 10. Different solution? Unplug power ● Ground pin 16 ● Plug it again ● Try it again... and again... and again...
  • 12. Forget everything ! ! ! and st Get back to the 1 idea ! ! !
  • 13. The Solution: # /sbin/ifconfig eth0 # /sbin/dhcpclient eth0 or # ln -s /sbin/ifconfig ifconfig Do not plug the power in just yet – Plug a patch cable into one of the 4 LAN ports – Configure the network: – [root@localhost media]# dhcpclient eth0 Use DHCP – #dhclient eth0 [root@localhost media]# ifconfig eth0 eth0 Link encap:Ethernet HWaddr 00:0C:6E:13:01:06 inet addr:192.168.1.188 Bcast:10.1.1.255 Mask:255.255.255.0 inet6 addr: fe80::20c:6eff:fe13:106/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:584152 errors:0 dropped:0 overruns:0 frame:0 TX packets:508898 errors:0 dropped:2 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:745903995 (711.3 MiB) TX bytes:44541763 (42.4 MiB) Interrupt:19 Base address:0x8800
  • 14. So easy ! The default gateway is the IP address of the ● router it was 192.168.1.20 ● We logged in the router and changed the ● necessary configuration
  • 15. Tasks: 1. To configure a Linksys router as an Access ● Point using basic configurations. Easy ! 2. To discover the settings of a Linksys router ● configured with unknown settings At the end EASY 3. To upgrade the firmware of a LinkSys router ● and consequently configure it as a client
  • 16. Next Task To upgrade the firmware of a LinkSys router and consequently configure it as a client
  • 17. DD-WRT is a typical free Linux- based firmware ● originally designed to work on Linksys WRT54G Download of the DD – WRT firmware: ● http://www.dd-wrt.com/dd-wrtv2/downloads/stable/dd-wrt.v23 There are several files – use dd-wrt.v23_sp2_vpn ●
  • 18. Unzip ● You will discover 9 files; which one is required? ● Only need the bin file dd-wrt.v23_vpn_generic ● Use web interface ● Find option for upgrading ● Browse the folder you downloaded and click to ● the bin file and start the upgrade
  • 19. now wait for about 5 or more minutes ● but how long? ● Note that any disturbance can blow off your ● router we closed the window ● using the previous IP address 192.168.1.20 we ● had our router upgraded
  • 20.
  • 21. Finally we required user and admin password ● We simply did a hardware reset and obtained ● the default User: root with password: admin Now you are done and can move to the next ● step.
  • 22.
  • 23.
  • 24.
  • 25. References http://www.dd-wrt.com/dd-wrtv2/down.php?path=downloads ● %2Fstable%2Fdd-wrt.v23+SP2/ http://en.wikipedia.org/wiki/DD-WRT ● http://www.dd-wrt.com/wiki/index.php/Installation ●