Page 1 of 4

Posted: Wed Feb 11, 2015 9:58 pm
by j0akes
So, I have an issue. My Grandfather has $#@!ed with settings on the router making services like Netflix take up all the bandwidth and things like Starcraft and online shopping totally banned via OpenDNS.
Whenever someone goes on youtube or Netflix or anything, pretty much all games are unplayable.

Grandfather refuses to change things. Thinks Starcraft is demons or something.

So what I want to do is sniff the password via Cain, but first I have to get him to log into the router.

I've been trying to SYN it and slow it down to the point where he has to reset/check settings or something right.
So far it hasn't been working.

It would be cool to use a DNS amp attack against my own network but I'm not sure what kind of legal implications that has as well as I'm also not sure how to do it.

I've also tried just straight cracking the password with a dictionary attack, (rockyou.txt, its a massive file with something like 32 mil users passwords) it got 32% done and froze.

Are there other methods of like, DOSing my own network?
Or potentially just doing some sort of nerd magic to just have the router let me in?

Posted: Wed Feb 11, 2015 10:02 pm
by MagisterXF94
Check the Quality of service on each program.
That could help.
HOOOLD UP.
Can you access your router?
Is there a button to restore its factory settings?

Posted: Wed Feb 11, 2015 10:15 pm
by j0akes
Yeah but, my grandpa would immediately know that I reset it then all hell would break loose.

So technically yes, but its not really an option.

Posted: Wed Feb 11, 2015 10:37 pm
by zombywoof
Have you just tried using the default password?

If he's doing it with OpenDNS just change your DNS server to something else.

https://developers.google.com/speed/public-dns/

It's not even necessary to change anything on the router. Control Panel -> Network and Internet -> Network Connections -> right click on the connection you're using -> properties, click on TCP/IPv4, click properties, and have it manually use a specific DNS.

Posted: Wed Feb 11, 2015 10:46 pm
by raumvogel
Does gramps own the router? Maybe it's best to leave the setting as they are. Beats homelessness.

Posted: Wed Feb 11, 2015 10:56 pm
by zombywoof
I once lived in a house where people blocked webcomics. It was... interesting.

Posted: Wed Feb 11, 2015 11:04 pm
by j0akes
Um yeah, I get the ethical issue of hacking the router, kinda, not ethical. But alleg is unplayable whenever someone watches a youtube video.

Default passwords do not work. And I have tried changing my DNS settings on my computer. It seems to be a blocking feature with the router.

Im trying a smurf attack with kali linux and then sniffing the network for potential logins to the router from my grandpas computer.

Does doing this kind of attack over wireless have any effect on potency?

Posted: Wed Feb 11, 2015 11:27 pm
by peet
Buy the same model router and covertly replace it.

Posted: Thu Feb 12, 2015 12:00 am
by j0akes
That would work except if he tried to log in for whatever reason, he would know something is up because his password didn't work.

At which point he would reset the router to factory defaults, give us all heck, and we'd be at square one.

Then I'd just replace that router with the other one.

The circle of life.

Probably max two times before I'd be kicked out.

If I could somehow get on his computer I could install a RAT of some-sort and check his computer for the password, but IMO thats really intrusiony and makes me feel slimy.

I think the easiest method to obtain password is to get him to log into the router. Sniff pass. Tweak settings, whole house happy. Grandpa unaware, happy.

Everyone happy.

Everyone

Posted: Thu Feb 12, 2015 3:51 am
by Adaven
I like grandpa. Knows a bit of tech and how to keep whippersnappers in line.

Seriously though, it sounds like he doesn't trust you enough to heed your suggested router settings. Whether that is unfounded or not, the best bet is to build up the trust in your relationship. Probably improve other situations as well.