cr0hn / golismero-legacy

THIS IS A LEGACY VERSION PRESERVED FOR BACKUP, DO NOT USE
http://golismero-project.com
15 stars 4 forks source link

Add a router exploitation plugin #195

Closed MarioVilas closed 10 years ago

MarioVilas commented 10 years ago

This may come in handy ;)

https://github.com/eurialo/lightaidra

An analysis of the code:

http://blog.nruns.com/blog/2013/11/29/In-the-Wild-Malware-for-Routers-Sergio/

MarioVilas commented 10 years ago

A quick recap on this. It seems the code example only contains a single exploit for D-Link routers, and it's a rather crude one (resets the configuration to the factory settings).

This means that in order to implement this plugin, it won't be enough. We'd need to collect as many router exploits as we can find on Full-Disclosure and similar sources, and port them to GoLismero. Even though these exploits are really simple, it's still a lot of work - in fact, it's a tool in itself.

I'll close this for now as "wontfix". If we decide to code this afterwards, it'd make more sense to make a standalone tool instead and then just interfacing with it.