[Turtle™]

Hello HF, keep in mind that this tutorial is aimed at people who either have a router that they don't want to reset and the default password doesn't work.

I remember that at one point, I was extremely frustrated because I couldn't find my router password. All tutorials about port forwarding only applied if it was the default password however, my parents had changed it, which also ruled out resetting the router (since my parent's were not retarded and that would look quite suspicious).

So using backtrack, I was able to successfully SE (social engineer)/ sniff the password of the router. In this tutorial, I will be going through the exact same steps that I used to do this. If you do not have backtrack or don't know how to set it up on a Virtual machine, you can find out how to do that in my tutorial here. It's contained in the first half (but feel free to read the second part if you are interested in a technique of "hacking" people on your LAN without sending them any RATs or anything.)

So I will assume that you now have backtrack installed. Boot it up through Virtualbox and update it with

Code

apt-get update

and then

Code

apt-get upgrade

The update is not mandatory if you download backtrack 5r3 but it's always good to have an up to date version. In my experience, the updates on backtrack are sometimes very buggy so it's up to you.

We will now be using a tool called ettercap. What we will do with this tool is use the dns_spoof plugin. What this will do is wait for someone to enter in a specific URL (which you will choose) and redirect them to another IP (which will be your IP so that they are connected to you).

First, we are going to have to specify what URL to wait for them to type in. To do this, go to the file etter.dns which is located in

Code

usr/local/share/ettercap/etter.dns

Now minimize the Virtualbox window and open up command prompt (or CMD), you can get to the CMD by going to

Code

Start > Accessories > Command Prompt

In the black window that should pop up, you will insert the command

Code

ipconfig

Spoiler (Click to View)

Now look for the Default Gateway IP which for me is 192.168.1.1
(For the skids that think that you can hack me with my ipv4, you can't, the ipv4 only applies inside the LAN) Enter that IP into the address bar of your web browser and you should be greeted with a login screen like this.

Spoiler (Click to View)

This is what we will be redirecting people to.

Now that you know your default gateway, restore your Virtualbox window and we will get to editing etter.dns. Start by scrolling down until you see where it says "Microsoft Sucks". You should see the microsoft website address redirecting to the linux website. We will be editing this to fit our own needs.

Now to specify what URL to redirect from and to, delete everything inside that section and enter in this.

Spoiler (Click to View)

This will redirect anyone on the LAN to your router login page whenever they use google.ca or any google searches. Keep in mind that you can also add other things to the list to annoy the person even further. Remember, the goal is to annoy the person who has the router password so much that he/she logs in to the router to find out what's wrong.

For example, it can look like this to piss the person off further
Spoiler (Click to View)

Save the file and exit it and open up a terminal. Do this by pressing the black button in the top right corner.

Spoiler (Click to View)

Now we will use the command

Code

ifconfig

Look on the very left. Mine says eth0 but yours may say something else, for example wlan0. Remember what is says, it's very important. If you get multiple results, use the one that contains your local IP. It should be similiar to your default gateway. Mine is 192.168.1.166

Spoiler (Click to View)

Now, finally we will commence the sniffing and redirecting. Enter in this command into another terminal

Code

ettercap -Tqi eth0 -P dns_spoof -M ARP // //

Replace eth0 with whatever it was that was displayed when you used "ifconfig" There are other variations of this command, other options you can use, other targets you can target. In this example, we will be redirecting everyone in the whole network (hence the "// //")

This is what it should look like

Spoiler (Click to View)

When it starts listing some IPs, it means that it has started to sniff the network and everything should now be working. You can test it yourself by trying to go to one of the websites that you put in the etter.dns file. You should be redirected to the router login window.

The minute that someone logs into the router, it will start spamming the window with the user and pass. This is what mine looked like.

Spoiler (Click to View)

As you can see, the username was "admin" and the password was "Restricted"

THIS CONCLUDES MY TUTORIAL ABOUT HOW TO SNIFF YOUR ROUTER'S PASSWORD! PLEASE POST, ALL YOU HAVE TO DO IS CLICK THIS BUTTON HERE

[Sicarius]

Well I never knew this. Good HQ tutorial! Well done.

[einFreak]

Thank you SO much! I will try this after school! Thanks a LOT!

[SouqlRS]

Thank you SO much! I will try this after school! Thanks a LOT!

Feedback please, did it work? 😖

[Turtle™]

Feedback please, did it work? 😖

Why? You've got nothing to lose from trying it. Try it yourself and see if it works yourself, it's all free and pretty easy.

[DarkNecr0n]

Thanks but how can you disable it again? I tried to stop the command and also shut the virtual machine down but im still getting redirected :/

Edit: Ok nvm. DNS Flush solved it

[BlackOverride]

Thanks for this great tutorial I really appreciate t​he hard work that you put into this

[Rainbоw Dash]

Wow thanks man it always made me mad when Rarity changed the router password. <3

[James Franco]

Thanks for this great tutorial I really appreciate t​he hard work that you put into this

[Porcupine]

Wow, i'm going to try this right now and see if this works!
What does HQ mean btw?

[andq1]

Wow, i'm going to try this right now and see if this works!
What does HQ mean btw?

High Quality.
But yes indeed very nice tutorial, this wont come me handy because our stupid ISP has blocked port forwarding and so on because my mothers work pay for the Internet >.<

[on-silo]

Great read, turtles been putting out some awesome stuff, i havent tried this will test soon.

[Zabuza]

HQ Post, thanks! Imma go and see if this works right now x3

---

Wow, i'm going to try this right now and see if this works!
What does HQ mean btw?

HQ Means "High Quality" 🤝 (I need 35 characters so just ignore this <--)

[Canardo]

Wow thanks man it always made me mad when Rarity changed the router password

[denyx]

I will try this on my wimax bm622i... i don't know the admin password..
Do you think this will work?