How to obtain your username and password from the sky router

[Jose Cardoso]

.
Before reading this thread Please read this first.
.

The following link explains the URL Injection hack and how to use it to obtain your Sky ADSL username and password amongst other things:

Asinine Monkey | NETGEAR DG834GT Hacking

A big 'thank you' to mossywell for helping smooth out all the rough edges of my investigative work.

Update: This method will not work on the new Netgear DG934G or Sagem F@ST 2504 Sky routers (The black routers)

[Jose Cardoso]

Wow, very prompt of you sir. Much appreciated.

[NewsreadeR]

no probs like I always said - you did good work

[tadunne]

I've written a simple HTML page that can be downloaded an run locally to send the SNR target percentage to the router, but could be hosted on a website.

It basically presents a form to the user allowing them to select the target SNR % either from a dropdown or as freetext.

Just uses HTML and javascript.

Anyone wanna test?

Could extend this over time to automate other Url injection hacks to get the router stats, turn telnet on etc..?

[Ysmalari]

tadunne,
Gave your html page a go but got the following error message:

Usage: ping [OPTION]... host /usr/sbin/adslctl: invalid parameter for option --snr

[tadunne]

that means it's worked..

did your router re-sync

[Keiran2K8]

Originally Posted by tadunne

I've written a simple HTML page that can be downloaded an run locally to send the SNR target percentage to the router, but could be hosted on a website.

It basically presents a form to the user allowing them to select the target SNR % either from a dropdown or as freetext.

Just uses HTML and javascript.

Anyone wanna test?

Could extend this over time to automate other Url injection hacks to get the router stats, turn telnet on etc..?

Iv put it here for you! http://admadm4.freehostia.com/broadb...tSelector.html

[Ricey155]

what program you using to read the cfg file ??

windows keeps sending me to the dynsite to download



cheersy