Welcome back.
Time to check out the default credentials vulnerability on your router.
Now, this tutorial is something that you cannot follow because this is going to be different for every
type of router that someone has.
I could just show you the process of how I went in, discovered the default credentials, and you can
try to do the same thing in order to see whether you can gain access to your router.
So the first thing that I did is I typed Netz that Desch and R to check out the IP address of my gateway,
which is most likely going to be the IP address of your router.
Then I went to Google Chrome and visited that IP address.
If you do the same for your router, it will most likely lead you to some type of a login page where
it will ask you for the username and password.
Once you type the username and password, you will have access to the router settings and you will be
able to change a few things here and there from setting up a wireless port forwarding and similar settings
like that.
Now, if you haven't changed the default password for your router, you will most likely be able to
find it on the Internet, which I did.
I just search the name of the router that I have right here.
And they found the username to be telecom and password to be telecom.
Nobody changed this username and password.
Therefore they are exactly the same.
And we even get this warning.
This says A data breach on a site or app exposed your passwords.
Chrom recommends changing your password for this IP address.
Now we're going to click on OK.
And pretty much we already gained access to the router settings.
We can set up the firewall VLAN settings.
We can check out different settings that we have right here.
We have some security settings right here.
We also get the port forwarding, which we can perform.
And this is something that they tested on multiple home routers.
And many of them appear to have default credentials where it allows you to log in to the router and
change these type of settings.
But these are not the only default credentials that you can find.
For example, if I go right here and I run and maps, can we just comment on my router IP address?
I've also discovered that it has some ports open.
For example, it has this telnet port open.
We already know how we can connect to the Internet, we can type the command telnet and then the IP
address of the target, it want to connect it.
If I press enter, we will get another login screen.
So if we type something like telecom once again, it will tell me that the password is incorrect.
Hmm.
So after three attempts, it simply just closes the connection to the Rothert and I figured, well,
if the Volter default credentials were changed, then probably I can find it telnet credentials as well
on the Internet.
And after a few minutes of Googling, I ran across this website where I scrolled a little bit down and
I found this post that was posted by someone.
It says my router name, which is this one.
And we can compare it right here.
It is the same name.
And we get the username and password.
We also get how we can enable the shell inside of that router.
So let's give it a try.
The user name is admin and the password is this.
Let's go and run telnet once again.
Type user name to be admin and password to be zeti and piqué.
And here it is.
We're inside of a key ally.
Now the next thing that this person does is it types enable.
Then it enters the password of C.P.E. and then it enables Shell.
Let's give it a try if I type enable type Qiqi and then Shell.
Hmm.
Another login attempt.
But luckily this person also provided us with username and password for that.
This is something that we will most likely never be able to brute force in case we didn't know, because
this is a really strong username and strong password.
However, it is default one and this is something that we can find on the Internet for your router.
Of course, this will not be the same, but you can go through the same process of searching for the
default credentials.
Just figure out the name of your router, type it in Google and try to find some default credentials.
For example, we notice that I have open Port S.H. Internet.
You might be able to target S.H. and not telnet or you might be able to target some different port.
It could all depend on your router.
However, now I'm targeting Telnet and let's go and type in the username and password that this person
sent us.
So I have it written on my left screen and I will type F and and as the three C X, H and H one six
eight and the three one.
For some reason, it says bad username.
Let's try once again, maybe we typed something incorrectly, so let's go admin password, let's enable
the password and let's go into Shell here.
We want to type fan and as the three x, H and H one six eight and V three one, which is the login
and the password is C, X, H and H one six eight and V three one.
And here we are, we are inside of the shell, if I type, unless we're going to be able to see the
files on our router, I can type the command to be able to see all of the interfaces that our router
has here.
The first interface has the IP address of one or two of the 168 that wanted one and done here.
We're also going to be able to find the public IP address, which is right here.
OK, great, we have gained access to the router, we can also go and change directories for different
directories if we want to.
We can run different commands that you can usually run from your terminal, and that's how you can gain
access to your outer with default credentials.
Now give it a try on your own router.
Try searching the name of the router first.
Try logging into this page right here, which will grant you an access to some of the router settings.
And even if you don't manage to do that, Trist Kanagaratnam with and map.
Figure out whether it has some interesting ports open and then target those ports with default credentials
that you might manage to find online, just like I did right here.
OK, now that we've covered this, we're ready to continue with our exploitation section.
See you in the next video.