Saltar al contenido
Underc0de /foro

[SOLVED] Cisco DPC3825 - ADMIN

🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
PikachuDorado ·
Hi guys, I'm trying to log into that router (my neighbor's) and I tried 2 million different passwords to get into the panel.<br />I can't find a way, is there any way to do brute force?<br /><br />Los enlaces son solo para miembros. Registrate o iniciá sesión<br /><br />Thanks :B<br /><br /><br />EDIT: Thanks for moving it to the correct section, I thought networks was the right one (:
Cl0udswX ·
First thing to know, have you tried the default passwords?<br /><br />Have you tried leaving the user and pass fields blank?<br /><br />If you're going to do brute force it's advisable to do it via telnet, so launch an nmap to the gateway address and verify that it has port 23 open, if so look for some hydra or medusa manual on the forum (A while ago I think I wrote something about the topic)<br /><br />Regards.<br /><br />
PikachuDorado ·
Yes cloud, I tried the default ones, and leaving the fields empty. At noon I saw a post that had many default logins for several modems. But this particular model doesn't appear on the forum.<br />I'm going to try doing an nmap and check the ports. I usually use fing to know if the owner connects, and looking at the fing service scan I see it has port 80 open. I have the MAC and the IP of the gateway.<br />In the information security degree they gave us a pack of tools. What is putty for?<br /><br />I used SuperScan4 (from the pack) and it gave me this result<br />
Citar<br />The IP list contains 1 entries<br />Service TCP ports: 179<br />Service UDP ports: 88<br />Packet delay: 10<br />Discovery passes: 1<br />ICMP pinging for host discovery: Yes<br />Host discovery ICMP timeout: 2000<br />TCP banner grabbing timeout: 8000<br />UDP banner grabbing timeout: 8000<br />Service scan passes: 1<br />Hostname resolving passes: 1<br />Full connect TCP scanning for service scanning: No<br />Service scanning TCP timeout: 4000<br />Service scanning UDP timeout: 2000<br />TCP source port: 0<br />UDP source port: 0<br />Enable hostname lookup: Yes<br />Enable banner grabbing: Yes<br /><br />Scan started: 07/13/16 00:28:57<br /><br />-------- Scan of 1 hosts started --------<br />Scanning 1 machines with 1 remaining.<br />-------- Host discovery pass 1 of 1 --------<br />Host discovery ICMP (Echo) scan (1 hosts)...<br />1 new machines discovered with ICMP (Echo)<br />TCP service scan (SYN) pass 1 of 1 (1 hosts x 179 ports)...<br />UDP service scan pass 1 of 1 (1 hosts x 88 ports)...<br />Performing hostname resolution...<br />Performing banner grabs...<br />  TCP banner grabbing (0 ports)<br />  UDP banner grabbing (0 ports)<br />Reporting scan results...<br />-------- Scan done --------<br /><br />Discovery scan finished: 07/13/16 00:29:07
<br /><br />It seems strange to me that not even port 80 appears. What else can I do? (=<br />
arthusu ·
Try with:<br /><br />cisco:cisco<br /><br />Regards!
PikachuDorado ·
Not that either bro x.X
Stiuvert ·
Searching on the Internet about that Cisco model I found some keys that have worked for users.<br /><br />user: admin<br />pass: 0<br /><br />user: admin <br />pass: W2402<br /><br />user: admin<br />pass: MAC address including the colons (aa:bb:cc:dd:ee:ff)
79137913 ·
HELLO!!!<br /><br />I found the following:<br />
Código: text
Users and passwords [user:pass]<br />[(empty):(empty)]<br />[cisco cisco]<br />[cusadmin:(empty)]<br />[admin:(empty)]<br />[admin:admin]<br />[admin:(MAC all together without colons)]<br />[admin:(MAC separated by colons)]<br />[admin:(WAN MAC all together without colons)]<br />[admin:(WAN MAC separated by colons)]<br />[admin:(serial number)] <- you'll have to get the s/n from the label.
<br /><br /><br />THANKS FOR READING!!!
PikachuDorado ·
The serial I think is impossible for me because it's not mine hahaha<br /><br />And the WAN MAC how could I investigate it? Also on the label?
79137913 ·
HELLO!!!<br /><br />Yes, unfortunately the label...<br /><br />If it's not yours it's surely a neighbor's who has Cablevision Fibertel with internet, they have a customized firmware which has remote access through the coaxial cable. You won't find the router passwords in the basic ones, cablevision changes them, at one time it was the customer number from back to front, and now they have a thousand variations.<br /><br />The customer number you can get from the cable bill that arrives each month... CAUTION it's illegal to take someone else's mail, it's private property.<br /><br />THANKS FOR READING!!!
PikachuDorado ·
Until a few months ago with the same internet connection it recognized the user data for you, I forgot to do footprinting at that moment and write down all the information.<br /><br />That is, from the connection you entered Fibertel clientes and automatically it gave you the billing data and everything. But now it's with login.<br /><br />I have people working at fibertel, I can ask for the data knowing the address.<br /><br />Thanks @79137913
Stiuvert ·
Cita de: PikachuDorado en Julio 14, 2016, 09:15:54 AM<br />And the WAN MAC how could I investigate it? Also on the label?<br />
<br /><br />The MAC address you can know in a moment, analyzing the surrounding traffic with Airdump-ng from Linux (by default it comes installed in auditing distros).<br /><br />Regards
Grupo de WhatsApp