Home Router DNS hacked

[NeoMatrix]

For those interested I happened to stubble over a home modem/router hacking article. It is dated 2010.
I thought I would post it to CTN for those people who are interested.
You may have one of the modems listed in the web article.

"www.forbes.com\sites\firewall\2010\07\13\millions-of-home-routers-vulnerable-to-web-hack\#9afdf99a68c8"




"Millions" Of Home Routers Vulnerable To Web Hack

[NeoMatrix]

Re: Home Router DNS hacked

HP (Hewlett Packard) printer firmware hacked.

Another notable website article on Forbes website Dated 2011. The article mainly relates to old style HP printers.

Computer hackers can change HP firmware to read social security numbers and false Paper Jamb in the printer fuser to cause smoke.


"www.forbes.com\sites\alexknapp\2011\12\26\hp-releases-firmware-update-to-prevent-printer-hacking\#51807ac63d6b"


HP Releases Firmware Update To Prevent Printer Hacking

[NeoMatrix]

Re: Home Router DNS hacked

While on the topic of hackers and hacking network systems.

The following web site lists a range of "hack prevention" software.
The software ranges in price from very expensive to free ware.
I'm always double doubtful about "anti-hacking" software.

If anyone has tried the various software listed on the following website, feel free to make a comment about the particular software.

Good, bad, don't care, share the results....

"http:\\hack-prevention.sharewarejunction.com\"

403 Forbidden

[nekowaiidesu]

Re: Home Router DNS hacked

Black Hat 2016 starts in a month (HYPE)

Not to go too off-topic: but does anyone know how I could learn to write / modify firmware? Links or any useful content would be really appreciated.

[NeoMatrix]

Re: Home Router DNS hacked

Black Hat 2016 starts in a month (HYPE)

Not to go too off-topic: but does anyone know how I could learn to write / modify firmware? Links or any useful content would be really appreciated.

I'm not sure what you wish to achieve, I'm not sure I really want to know.

Search CTN for "password" some of those threads should give you some starting points.

[nekowaiidesu]

Re: Home Router DNS hacked

Haha it's just an interest of mine. I studied programming but ended up as a technician for the time being. Now that I have access to bunch of old copiers and printers, and an interest in coding, i figured it would be fun to learn how firmware works and to play around with :P

Will have a search through CTN - again though, if anyone knows more about modifying / writing firmware and has any good content to read please let me know

[NeoMatrix]

Re: Home Router DNS hacked

Haha it's just an interest of mine. I studied programming but ended up as a technician for the time being. Now that I have access to bunch of old copiers and printers, and an interest in coding, i figured it would be fun to learn how firmware works and to play around with :P

Will have a search through CTN - again though, if anyone knows more about modifying / writing firmware and has any good content to read please let me know

Have you written any software programs or applications?

What area of knowledge are you interested in, games, data base, CAD, office-ware, op-systems, security, etc...?

Below is a CTN link you might find of interest.

"www.copytechnet.com\forums\connectivity\97276-all-one-i-t-tech-software.html?highlight=toolbox"

http://www.copytechnet.com/forums/connectivity/97276-all-one-i-t-tech-software.html?highlight=toolbox

There should be an updated version out soon.

[Iowatech]

Re: Home Router DNS hacked

Black Hat 2016 starts in a month (HYPE)

Not to go too off-topic: but does anyone know how I could learn to write / modify firmware? Links or any useful content would be really appreciated.

There might be something on Slashdot for that, but its up to you to look for it.

https://slashdot.org/

[copier tech]

Re: Home Router DNS hacked

Being able to hack copier firmware could be extremely useful, one benefit I can think of is disabling image unit warning life, especially on the Bizhub C35 & i'm sure there's many others.

[allan]

Re: Home Router DNS hacked

Haha it's just an interest of mine. I studied programming but ended up as a technician for the time being. Now that I have access to bunch of old copiers and printers, and an interest in coding, i figured it would be fun to learn how firmware works and to play around with :P

Will have a search through CTN - again though, if anyone knows more about modifying / writing firmware and has any good content to read please let me know

Sounds like the Konica Minolta Open-API development tools could keep you busy.
May be even some money in making these apps.

[rthonpm]

Re: Home Router DNS hacked

Likely, unless you're able to get the signing keys used for firmware updates, no MFP would load or potentially recognise the firmware file.

[NeoMatrix]

Re: Home Router DNS hacked

What F@#! crock of B/S....
It's a very sad day when your two main Telcos/ISP's in your own country can use service analysis(AKA hack) into your DNS severs and cache.
For those of us in Oz. In the following article below you will read about Optus and Telstra indicated in DNS analysis.

I've reported the above practice to the federal government telecommunication ombudsmen last year.
I now find out via the below Wikipedia article that DNS analysis service has been in use by these two main Telco's for some time.

Big deal some people might say. It all relates back to the Telco allowing your DNS cache to be redirected to google-analytics service which then allows other 3rd party rouge/illicit java script to run on your, Mobile Phone, Tablet, PC or network.

https://en.wikipedia.org/wiki/DNS_hijacking

--------------------- Excerpt from wiki article update 1st-june-2016-----------
Manipulation by ISPs[edit]

A number of consumer ISPs such as Cablevision's Optimum Online,^[3] Comcast,^[4] Time Warner, Cox Communications, RCN,^[5] Rogers,^[6] Charter Communications, Plusnet,^[7] Verizon,^[8] Sprint,^[9] T-Mobile US,^[10] Virgin Media,^[11][12] Frontier Communications, Bell Sympatico,^[13] UPC,^[14] T-Online,^[15] Optus,^[16] Mediacom,^[17] ONO,^[18] TalkTalk,^[19] Bigpond (Telstra),^{[20][21][22][23]} and TTNET use DNS hijacking for their own purposes, such as displaying advertisements^[24] or collecting statistics. This practice violates the RFC standard for DNS (NXDOMAIN) responses,^[25] and can potentially open users to cross-site scripting attacks.^[24]
The concern with DNS hijacking involves this hijacking of the NXDOMAIN response. Internet and intranet applications rely on the NXDOMAIN response to describe the condition where the DNS has no entry for the specified host. If one were to query the invalid domain name (fakeexample.com), one should get an NXDOMAIN response - informing the application that the name is invalid and taking the appropriate action (for example, displaying an error or not attempting to connect to the server). However, if the domain name is queried on one of these non-compliant ISPs, one would always receive a fake IP address belonging to the ISP. In a web browser, this behavior can be annoying or offensive as connections to this IP address display the ISP redirect page of the provider, sometimes with advertising, instead of a proper error message. However, other applications that rely on the NXDOMAIN error will instead attempt to initiate connections to this spoofed IP address, potentially exposing sensitive information.


[read more ]

https://en.wikipedia.org/wiki/DNS_hijacking

[nekowaiidesu]

Re: Home Router DNS hacked

Hi all

Been out of action for a while with a pneumothorax (collapsed lung basically )
Thanks for the replies. Will look into those articles when I have a chance

[NeoMatrix]

Re: Home Router DNS hacked

Hi all

Been out of action for a while with a pneumothorax (collapsed lung basically )
Thanks for the replies. Will look into those articles when I have a chance

Ouch!.... no good.

I can empathise with you there, that's exactly how I feel every end of financial year tax time.

It's tax time now....

[nekowaiidesu]

Re: Home Router DNS hacked

Have you written any software programs or applications?

What area of knowledge are you interested in, games, data base, CAD, office-ware, op-systems, security, etc...?

Below is a CTN link you might find of interest.

"www.copytechnet.com\forums\connectivity\97276-all-one-i-t-tech-software.html?highlight=toolbox"

http://www.copytechnet.com/forums/connectivity/97276-all-one-i-t-tech-software.html?highlight=toolbox

There should be an updated version out soon.

Yes I have written some small apps. Nothing too big or impressive. A clock-in/out type program so the receptionist can see which techs are in house or on callouts etc, key loggers, various IRC bots with varying capabilities (they were specific purpose bots), a load of college and textbook examples and practicals obviously. Also played around with Unity a bit among other things. Really am an amateur :P but I do find programming enjoyable. Very interested in security and hacking etc, but never bothered to learn much about it.

I took a look at your thread. Interesting idea. Will read through the rest of the thread (10+ pages lol..) and give it some thought (I'm sure there are a bunch of ideas I could add if I rack my brain over night). What language are you primarily using for this?