Almost half of the Internet users across the globe use ADSL routers/modems to connect to the Internet. However, most of them are unaware of the fact that it has a serious vulnerability in it which can easily be exploited by anyone with a basic knowledge of computer. In this post, I will show you how to hack an Ethernet ADSL router by exploiting the common vulnerability that lies in it.
Every router comes with a username and password using which it is possible to gain access to the router settings and configure the device. The vulnerability actually lies in the Default username and password that comes with the factory settings. Usually the routers come preconfigured from the Internet Service provider and hence the users do not bother to change the password later.
This makes it possible for the attackers to gain unauthorized access to the router and modify its settings using a common set of default usernames and passwords. Here is how you can do it. Before you proceed, you need the following tool in the process:
Hacking the ADSL Router:
Here is a detailed information on how to exploit the vulnerability of an ADSL router:
-
Go to www.whatismyipaddress.com. Once the page is loaded, you will find your IP address. Note it down.
-
Open Angry IP Scanner, here you will see an option called IP Range: where you need to enter the range of IP address to scan for.
-
Go to Tools->Preferences and select the Ports tab. Under Port selection enter 80 (we need to scan for port 80). Now switch to the Display tab, select the option “Hosts with open ports only” and click on OK.
-
Now click on Start. After a few minutes, the IP scanner will show a list of IPs with Port 80 open as shown in the below image:
-
Now copy any of the IP from the list, paste it in your browser’s address bar and hit enter. A window will popup asking for username and password. Since most users do not change the passwords, it should most likely work with the default username and password. For most routers the default username-password pair will be admin-admin or admin-password.
Just enter the username-password as specified above and hit enter. If you are lucky you should gain access to the router settings page where you can modify any of the router settings. The settings page can vary from router to router. A sample router settings page is shown below:
If you do not succeed to gain access, select another IP from the list and repeat the step-5. At least 1 out of 5 IPs will have a default password and hence you will surely be able to gain access.
What can a Hacker do by Gaining Access to the Router Settings?
By gaining access to the router settings, it is possible for an attacker to modify any of the router settings which results in the malfunction of the router. As a result the target user’s computer will be disconnected from the Internet. In the worst case the attacker can copy the ISP login details from the router to steal the Internet connection or even hijack the DNS by pointing it at a rouge DNS server. If this happens, the victim will have to reconfigure/reset the router settings in order to bring it back to normal.
The Verdict:
If you are using an ADSL router to connect to the Internet, it is highly recommended that you immediately change your password to prevent any such attacks in the future. Who knows, you may be the next victim of such an attack.
Since the configuration varies from router to router, you need to contact your ISP for details on how to change the password for your model.
I am Srikanth Ramesh, a computer engineer from India.
81 Comments
Karan Kapoor
June 28, 2010 at 4:03 PMxcptnaly dngrs..
June 28, 2010 at 4:23 PMSrikanth
June 29, 2010 at 9:10 AMkartik sibal
June 28, 2010 at 7:47 PMSrikanth
June 29, 2010 at 9:06 AMMuralimohan.A.R
June 28, 2010 at 9:21 PMSrikanth
June 29, 2010 at 9:07 AMkartik sibal
June 29, 2010 at 1:08 PMAjith
June 29, 2010 at 4:47 PMAlmarghulani
July 1, 2010 at 1:45 PMHasanka D-Note
July 2, 2010 at 12:47 AMMuralimohan.A.R
July 2, 2010 at 5:19 PMroshan
July 2, 2010 at 9:15 PMshubham
July 2, 2010 at 11:02 PMmohit yadav
July 2, 2010 at 11:39 PMSatyajit
July 3, 2010 at 10:23 PMDEEPU
July 4, 2010 at 1:05 AMviraj
July 5, 2010 at 5:58 PMViswa
July 5, 2010 at 11:00 PMpinky
July 6, 2010 at 11:27 AMdarkfuture
July 6, 2010 at 9:57 PMSrikanth
July 7, 2010 at 5:04 PMpunit
July 6, 2010 at 11:05 PMRuk-Com
July 7, 2010 at 2:14 AMSaRaB
July 9, 2010 at 2:55 PMwaffles
July 13, 2010 at 2:39 PMprateek
July 14, 2010 at 1:15 PMfokhwar
July 16, 2010 at 2:37 PMMonks
July 19, 2010 at 1:02 AMAshif
July 25, 2010 at 12:26 PMSrikanth
August 11, 2010 at 11:30 AMdurvesh
July 29, 2010 at 10:20 AMvinit
August 8, 2010 at 9:34 AMssss
August 9, 2010 at 4:23 PMMunjaal
August 11, 2010 at 9:47 PMSrikanth
August 12, 2010 at 12:26 PMbiswajit
August 20, 2010 at 12:15 PMSrikanth
September 17, 2010 at 2:18 PMJason
August 22, 2010 at 3:15 PMfaisal
August 26, 2010 at 1:48 AMgaurav
September 5, 2010 at 2:39 PMSAHIL BJ
September 5, 2010 at 7:43 PMarjie
September 6, 2010 at 5:45 PMSherif Awosanya
September 7, 2010 at 7:16 PMPouya
September 10, 2010 at 5:11 AMsopn0
September 12, 2010 at 9:47 AMkynox
October 1, 2010 at 11:43 AMtarun
October 4, 2010 at 5:02 PMPalash
October 10, 2010 at 8:27 PMSrikanth
October 18, 2010 at 11:14 AMCS
October 20, 2010 at 2:55 PMristo
October 23, 2010 at 3:46 AMranjeet
November 4, 2010 at 12:07 AMjavaid saleem
November 23, 2010 at 12:09 AMBala
November 25, 2010 at 12:36 AMsamuel
February 15, 2011 at 2:42 PMHeader
February 24, 2011 at 9:14 PMDmNS
March 24, 2011 at 2:40 PMrahul
April 4, 2011 at 9:14 AMSrikanth
April 12, 2011 at 11:42 AMSukhjit
April 20, 2011 at 5:26 PMwaqar
May 26, 2011 at 11:25 PMyogesh chhabra
June 1, 2011 at 8:40 PMSrikanth
June 5, 2011 at 12:14 PMshanker singh
June 6, 2011 at 12:55 AMdanny
June 18, 2011 at 3:03 AMAman Gupta
June 24, 2011 at 8:31 PMNeel
July 7, 2011 at 2:33 AMsandy
July 19, 2011 at 7:13 PMbala sharma
August 24, 2011 at 8:12 AMRahul
October 4, 2011 at 4:21 AMPARTHA
October 7, 2011 at 4:36 AMmayuresh
October 11, 2011 at 4:20 PMamit
October 26, 2011 at 2:12 PMAKASH
October 27, 2011 at 10:51 AMSrikanth
October 27, 2011 at 12:56 PMarsh
October 28, 2011 at 10:24 PMamit
October 29, 2011 at 8:30 PMdannyssy
October 31, 2011 at 5:49 PMjavid
November 8, 2011 at 8:50 PMmahdi
December 8, 2011 at 12:47 AM