Overclock.net › Forums › Industry News › Hardware News › [EDH] Reverse Engineering a D-Link Backdoor
New Posts  All Forums:Forum Nav:

[EDH] Reverse Engineering a D-Link Backdoor

post #1 of 5
Thread Starter 
Quote:
All right. It’s Saturday night, I have no date, a two-liter bottle of Shasta and my all-Rush mix-tape…let’s hack....


In other words, if your browser’s user agent string is “xmlset_roodkcableoj28840ybtide” (no quotes), you can access the web interface without any authentication and view/change the device settings (a DI-524UP is shown, as I don’t have a DIR-100 and the DI-524UP uses the same firmware):
Accessing the admin page of a DI-524UP

Accessing the admin page of a DI-524UP

Based on the source code of the HTML pages and some Shodan search results, it can be reasonably concluded that the following D-Link devices are likely affected:

DIR-100
DIR-120
DI-624S
DI-524UP
DI-604S
DI-604UP
DI-604+
TM-G5240

Additionally, several Planex routers also appear to use the same firmware:

BRL-04R
BRL-04UR
BRL-04CW

You stay classy, D-Link.

Reverse Engineering a D-Link Backdoor


In case you didn't see it.
Dynamix
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7-860 Gigabyte GA-P55A-UD4P Radeon 7970 Corsair Domintor Twins + Other = 16 Gb 
Hard DriveHard DriveOptical DriveCooling
WD Caviar Black, 500gb OCZ Solid 3 Sony Optiarc Corsair H50 
OSMonitorKeyboardPower
Windows 7 Ultimate Samsung P2570HD + Other Logitech G110 Corsair 750W HX 
CaseMouse
Antec p183 Logitech MX Revolution 
  hide details  
Reply
Dynamix
(15 items)
 
  
CPUMotherboardGraphicsRAM
i7-860 Gigabyte GA-P55A-UD4P Radeon 7970 Corsair Domintor Twins + Other = 16 Gb 
Hard DriveHard DriveOptical DriveCooling
WD Caviar Black, 500gb OCZ Solid 3 Sony Optiarc Corsair H50 
OSMonitorKeyboardPower
Windows 7 Ultimate Samsung P2570HD + Other Logitech G110 Corsair 750W HX 
CaseMouse
Antec p183 Logitech MX Revolution 
  hide details  
Reply
post #2 of 5
D-link should not be used, period. Perhaps the worst network equipment out there.
Another backdoor:
http://translate.googleusercontent.com/translate_c?depth=1&nv=1&rurl=translate.google.com&sl=auto&tl=en&u=http://habrahabr.ru/post/194154/&usg=ALkJrhggogH-0MbqNaDPTRs4qAjv60r-cw
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p glossy Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
Main
(17 items)
 
Nintendo DS
(8 items)
 
 
CPUMotherboardGraphicsRAM
6700K Gigabyte Z170X-Gaming 3 MSI GTX 1080 Gaming X G.Skill Ripjaws V 16GB 3000 
Hard DriveHard DriveCoolingCooling
Samsung 850 Evo 500GB WD Blue WD30EZRZ 3TB NH-D15S Nanoxia Deep Silence 140mm, 1100 RPM, 68.5 CFM 
CoolingOSMonitorKeyboard
Nanoxia Deep Silence 120mm, 1300 RPM, 60.1 CFM Windows 10 Enterprise Zalcom ZM27Q1 27" 1440p glossy Leopold FC750 (MX Brown) 
PowerCaseMouseAudio
EVGA 650 G2 Corsair 400Q Logitech Performance Mouse MX Mayflower Objective2 + ODAC Rev. B Combo 
Audio
Audio-Technica ATH-A990Z 
CPUCPURAMHard Drive
ARM946E-S 67.028 MHz  ARM7TDMI 33.514 MHz  4 MB 256 kB 
OSMonitorMonitorPower
DS OS 3" 256×192 18-bit 3" 256×192 18-bit 850 mAh 
  hide details  
Reply
post #3 of 5
With Linksys gone just after they starting making good products and Netgear home stuff constantly failing me I've had a DIR 655(?i think) that lasted maybe 5 years until I upgraded my Internet.


Currently installed a dlink media 1000 and it works ok. One reboot after a week...

We will see what happens.

Netgear business stuff is the best. Also I have a buffalo dd-wrt that works amazingly
Workoholic
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 2600K P8Z68-V PRO NVIDIA GeForce GTX 570 G.Skill 
Hard DriveOptical DriveOSMonitor
Intel 520 Series ASUS DVD+RW Windows 7 Ultimate 20.1" Samsung 
KeyboardPowerCaseMouse
Logitech G15 Corsair 620 Modular Lian Li V1020B G9x 
Mouse Pad
Custom Cloth Pad 
  hide details  
Reply
Workoholic
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 2600K P8Z68-V PRO NVIDIA GeForce GTX 570 G.Skill 
Hard DriveOptical DriveOSMonitor
Intel 520 Series ASUS DVD+RW Windows 7 Ultimate 20.1" Samsung 
KeyboardPowerCaseMouse
Logitech G15 Corsair 620 Modular Lian Li V1020B G9x 
Mouse Pad
Custom Cloth Pad 
  hide details  
Reply
post #4 of 5
If you reverse the message.... editby04882joelbackdoor

Its Joel's Backdoor! I think i know who committed that change =D
Zev's Comp
(15 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5-2500K Sandy Bridge 3.3GHz GIGABYTE GA-Z68X-UD3H-B3 LGA 1155 Intel Z68 HDM... GeForce GTX 750 Ti G.SKILL Ripjaws X Series 8GB 
Hard DriveHard DriveHard DrivePower
1TB HDD 64GB SSD (Used for SRT) 500 GB. Antec BP550 Plus 550W Continuous Power ATX12V V... 
Case
COOLER MASTER ELITE 335 RC-335-KKN1-GP Black S... 
  hide details  
Reply
Zev's Comp
(15 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5-2500K Sandy Bridge 3.3GHz GIGABYTE GA-Z68X-UD3H-B3 LGA 1155 Intel Z68 HDM... GeForce GTX 750 Ti G.SKILL Ripjaws X Series 8GB 
Hard DriveHard DriveHard DrivePower
1TB HDD 64GB SSD (Used for SRT) 500 GB. Antec BP550 Plus 550W Continuous Power ATX12V V... 
Case
COOLER MASTER ELITE 335 RC-335-KKN1-GP Black S... 
  hide details  
Reply
post #5 of 5
this is awesome.
love the joelbackdoor naming scheme.
new life
(17 items)
 
Ripley
(6 items)
 
 
CPUMotherboardGraphicsRAM
3820 @ 4.3giggles sabertooth x79 EVGA gtx 970 @ working on OC mushkin redline 16gb @ 1866 c9  
Hard DriveHard DriveHard DriveHard Drive
crucial m4 128gb WD blue 1tb hitachi deskstar 500gb WD Black 2tb 
Hard DriveOptical DriveCoolingOS
Hitachi Desktar NAS 6tb LG Bluray royale with cheese seidon 240m win 10 x64 
MonitorKeyboardPowerCase
acer G245HDL x2 logitech g710+ corsair 650w switch 810 white 
Mouse
rat 7 
CPUGraphicsRAMHard Drive
i5-4200u HD 4400 8gb @ 1600mhz Crucial MX300 275gb 
OSMonitor
Linux Mint 18  15.6" 1080p 
  hide details  
Reply
new life
(17 items)
 
Ripley
(6 items)
 
 
CPUMotherboardGraphicsRAM
3820 @ 4.3giggles sabertooth x79 EVGA gtx 970 @ working on OC mushkin redline 16gb @ 1866 c9  
Hard DriveHard DriveHard DriveHard Drive
crucial m4 128gb WD blue 1tb hitachi deskstar 500gb WD Black 2tb 
Hard DriveOptical DriveCoolingOS
Hitachi Desktar NAS 6tb LG Bluray royale with cheese seidon 240m win 10 x64 
MonitorKeyboardPowerCase
acer G245HDL x2 logitech g710+ corsair 650w switch 810 white 
Mouse
rat 7 
CPUGraphicsRAMHard Drive
i5-4200u HD 4400 8gb @ 1600mhz Crucial MX300 275gb 
OSMonitor
Linux Mint 18  15.6" 1080p 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Hardware News
Overclock.net › Forums › Industry News › Hardware News › [EDH] Reverse Engineering a D-Link Backdoor