Exploit a Router Using RouterSploit [Tutorial]

[@brandenminton3418]

Found two vulnerabilities on my router thanks to this! Then I found out that xfinity doesn't allow users to update the hardware they provide. Guess who just ordered a new router? Thanks for this video.

[@illuminatiilluminati9836]

Please make a full course on ethical hacking...

[@fredericchopin7639]

@Richard Vaughn what you are talking about is illegal im pretty sure. If you really want to you should go to the deep web.

[@joemccormick9348]

@@fredericchopin7639 u crack me up

[@fredericchopin7639]

Joe McCormick can you explain why

[@joemccormick9348]

Your general lack of knowledge that its perfectly fine to put it on the internet and your general complete misconception of what the dark web is entirely

[@fredericchopin7639]

@@joemccormick9348 And why do you think so? There are many helpful forums for hackers on the dark web. He wont be able to find unethical hacking courses on youtube so i suggested him to check out the forums on the dark web. whats so wrong about that.

[@maxpayne438]

I asked my router for concent, and it blinked...guess it is okay with this

[@3rdvoidmen594]

Underrated comment

[@luiscastillo6615]

Hey how do I open routersploit I cant open it and I install it help

[@NinjaHempKnight]

@@luiscastillo6615 make sure you are root: sudo routersploit [ENTER]

[@brothersgta339-jb1ld]

​eat chickens 😂

[@Drael1024]

Just discovered your channel and I have to say, your content is amazing! Also thank you for this video.

[@emtdavis]

I came here to say the same as Tibor - great stuff, man. Keep up the excellent work!

[@enos5192]

Hey I know U

[@juanp5308]

Bro u are the guy of linus tech tips!

[@norsendo6532]

Lil note (HE DOESNT BLINK!)

[@roykibet6038]

Imagine having this guy as your next door neighbor 😅😅

[@mono9237]

would be cool, i would ask him for teaching :D

[@ajinkc1031]

@Nguyen Dang Duy Khang i dont think he would do that

[@mikemaschine22]

i would only run wires no wifi xD

[@J2897Tutorials]

A distant physical location wouldn't provide safety. He can attack from both the LAN and the WAN.

[@dashdashdash_]

@@J2897Tutorials And he also might test your locks whilst you're out at work...

[@platinumpython9312]

Everybody makes errors, makes more sense to continue the video than to edit it. Great stuff, your way of explanation is super smooth. Would appreciate a video of you creating Persistence USB, without LUK. Thank you!

[@mlgamer5547]

I want to say that once i was a beginner i learned all from this channel. I wish this channel could reach 1 m subscribe before 2021

[@trentcarr1939]

teach me your ways

[@Jackaldev]

2:46 I thought he was having a stroke for a second.

[@capalert1301]

Jackal cool to see you here...

[@Jackaldev]

Wym?

[@Jackaldev]

Yep

[@colt8110]

Jackaldev i saw you from the lanc vids

[@5entience626]

Lmfaooo

[@crimsontorso4126]

Hawaiian routers are mostly unsecured, as a large amount of botnets (mostly mirais) use these routers by using a set list of 0days. Also, thanks for the

[@rage7658]

that introduction is one hell of a ride

[@NullByteWHT]

We shot that and a commercial for a donut store in the same two hour period

[@rage7658]

Null Byte Oh my god 😂

[@psknhegem0n593]

Thanks for your awsome job mate! It's clearly not rewarded enough!

[@jeonghutamilim2259]

ISP's like to implement TR-069 backdoor into things

[@lennovo9525]

Omg. It blinks at 1:20. He may be human after all. Great channel.

[@tibielias]

Thanks for the video! I scanned all my devices at home. Routersploit has only found devices where the 6-9 vulnearbilities (on various ports) couldn't be verified. Is there a way to try to get a better picture whether these devices are really vulnearble or not? Can you group together these unverified exploits and run them individually using RouterSploit? Update: Never mind. I tinkered with it a bit and got it to work! Pretty powerful tool, I have to say. Many of the payloads might need some fine tuning since they crash the CLI with silly errors such as "unorderable types" when comparing tuples and such. Nothing that couldn't be fixed.

[@C-j-m-218]

Well if they have the exploits see if you can hack it

[@KayvonGz]

Charles Mills Shouldn’t have to, the scanners Routersploit uses is trash.

[@hotwoodgaming5795]

You need an online course for this stuff man great channel btw

[@grimssouls3897]

I managed to get into my own router. My creds weren't vulnerable, but rom0 and another thing like cmd was. I was able to run payloads/commands directly from my computer. My skill level doesn't know what to do with the vulnerabilities I got, but I do know that it could reak havoc on my router.

[@christianhernandez4573]

Awesome video man, I love your work. Thank you for putting this information out into the world. I can guarantee you will inspiring people to do great things by sparking their curiosity. Again Thank you

[@dr--a]

Awesome stuff Bro, I agree you should make a course on ethical hacking 👍🏼

[@shmehfleh3115]

This RouterSploit program is cool and all, (and it's definitely good advice to keep your stuff patched), but if it requires you to be on the inside of the network anyway, then the damage is already done. At that point, having your IP cam hijacked is the least of your concerns.

[@djnikx1]

yup, he missed to mention that..

[@techtweakstv]

Nice video! but if that cam was a sample, maybe you can create a dummy info or vulnerability so that we can see the information given on that exploit and how we can check the credentials and logged in. .:)

[@rkan2]

Yeah… I completely left hanging by what was pwned!

[@squiggerzzzz]

Like a few others have mentioned, the “set port” command was giving me trouble too (on MacOS), but in the list of usable options it displayed it appears maybe routersploit got an update and now the command is set http_port 80 (or whatever port you want). Awesome vids btw NB, whenever my brain shifts into inquisitive mode during the day I try to come back to pick up another topic I’m unfamiliar with. Thank you for sharing the intel!

[@thejestersrealm7965]

*Says legal disclaimer* Black hats: “that is merely a suggestion”

[@georgek4416]

1:30 I was looking at this cute cat and not listening you. I had to rewatch this part.

[@NullByteWHT]

if it was the fat angel behind me then I don't blame you

[@georgek4416]

@@NullByteWHT lol

[@MirkWoot]

Right away when i heard "Easy python script", I thought.. "No, not simple or easy" haha.. then there are requirements, and commands :P. I can figure this out, and know there is target audience. I just thought it was a little fun anyway as it also takes a little more knowing things than the average person.

[@TheAnalystradioprogram]

I burst out laughing the way you said “Definitely illegal” because you already know I’m gonna do it. Omg. You might have well have said “Yea fuck it, you people are on your own” Lol

[@Kurkeyyy]

So you can use router split for your own good to see if your router is good?

[@fawwazchiwne8611]

Explanation man ♥️

[@rafeinnit8114]

I dont have a port setting in my target options?

[@porlando12]

Thanks for the vid. I was able to get this running on my Rpi!

[@plutoboy8827]

Awesome man!!! Going to hit 1 lakh subs soon...

[@NullByteWHT]

pluto boy thank you!

[@DormirnaodaXP]

Hello null byte team am I again, congratulations for your good work on youtube, I would like to ask a video teaching how to capture information on smartphones and laptops on the same wi-fi network as us!

[@ricarprieto]

You're awesome! I just discovered your channel... how many wasted minutes on youtube before you! Thank you for your videos

[@ne12bot94]

Great video , keep up the excellent work.

[@joincryptouk]

Great video on a very nice tool to play with on your own network.

[@jamesnduati7083]

I would like to see this channel get 1m subscribers very soon.

[@MrCipek1221]

It's awesome to see tool made in poland in your video :)) greetings from pl :)

[@j.rumbleseed]

got it finally. thanx much for this tutorial.

[@wesleyvaleran394]

Great video kody like always😁 ive been playing with routersploit since last year but recently got some error(python 3) but i guess it will be fixed with a pip upgrade anyways i hope to see more videos like this that are not based on hardware or anything of a kind(tried your wireless attack videos unfortunately my wifi card only supports monitor mode not packet injections)😅 could you do a video on how these attack/exploits are automated, like vpnfilter/botnet ? Keep up the good work😁

[@NullByteWHT]

Wesley Valeran glad you enjoy them! I'll be trying some basic python exploits soon.

[@Steven-wo9bm]

You......are......amazing bro. You are my teacher.

[@ulim8]

Great video, thanks for contributing it! One thing that gets me though, that black book in the background with the yellow font, what is it? It seems so familiar to me....

[@NullByteWHT]

It's called "the code book"

[@NullByteWHT]

I got that wrong, it's "codes, ciphers, secrets and cryptic communication"

[@ulim8]

Thanks muchly! I knew i recognised it! Choice!

[@ericimi]

Love this series.

[@_crys_]

The only thing I don't get: you're doing the scan and exploitation on the internal network. How does the vpnfilter malware or anyone malicious access these ports that are only open internally? If you type in someone's IP address into your browser, you won't see their router's web configuration panel...

[@geminivegan6587]

Where can i find a full length of you teaching cyber security ?????

[@benjaminallread4656]

thank you so much I love your channel I just tested this out on my own router and I actually got in this is my first real life hack I AM SO EXCITED THANK YOU SO MUCH I LOVE YOU

[@mrj2904]

Just to wrap my head around things. It makes sense to do this on your own network that you are connected to. But can you do this to other routers remotely? If you use a public ip address ? Is this possible ? Or do you need to be connected to the router you are trying to exploit ? Any help and advice would be appreciated. To clarify I’m learning / have consent from others 😂

[@5wholepizzas284]

I think u have to be in the routers network before u can exploit it

[@outlaw8379]

I've been learning these types of things for a while and always wondered is it possible to find out a WiFi BSSID and Channel even if the router is in another country? I can perform the basic DoS on any network im within range for, however my friend who lives in Scotland volunteered that I can pentest his Router, is there anyway of doing so? Sorry, im a newbie to ethical hacking and cyber security

[@DeanoboiROTMG]

very informative just goes to show how vulnerable everyone truly is and they dont even know it

[@nobeltnium]

my router look at me watching this video and scream

[@zephyr1018]

Your voice is like an angel nice video 😇

[@PaulBadman]

Would OEM ISP routers be at a greater risk than a store bought router?

[@NullByteWHT]

Paul Badman ISP routers are worse

[@PaulBadman]

Thought that would be the case,However thought I would ask anyway

[@PaulBadman]

DD-WRT is down at the moment and my router isn't supported by open-WRT (I changed provider and old router broke),However I'm looking for a new router mainly because this one is bullshit for streaming files from NAS to over devices I would really like one with a 4G back up on it but I doubt I would ever use the 4G function lol

[@PaulBadman]

what do you need to hack? Most people have their profile public and the answer to their email security question on their profile. as long as you get their email thats tied to their account you could just reset the P/w and jump in,It's been a while since I done anything like this so I wouldn't know if that still works

[@JohnTheRipper143]

hello,I love your videos,but I'm curious about what classes I should take in order to become a professional pentester. what type of books should I read? please help

[@HeadlampMafia]

I also am curious. This sort of thing has always fascinated me, but I never allowed myself the time to dig into it

[@Subjagator]

@@HeadlampMafia My suggestion would be to find a company that specialises in penetration testing and ask them what they typically look for when they are hiring people. That will give you a decent idea for what is required and you can go from there.

[@cexeodus]

Its wild that you can literally render your wifi network invisible to most wifi scans by adding one specific character and never really need to worry. Cant even detect other devices over ADB wireless debug when on the same network. NSA gonna love that, when they have to pay me to reveal one literal key press and then realize how stupidly simple it is 😂

[@dududjddjehdhdud-ui3yc]

You believe that?

[@cexeodus]

@@dududjddjehdhdud-ui3yc Its not a belief in that I would rely on it, but also I do have a bit of awareness of the fact anything can be hacked. Just a metter of time with any service, protocol, etc Its good until it isnt like the whole rest of the tech world.

[@mrtgsy]

Thanks... spent the night beasting my network looking for issues. None found, which is good. Potentially stupid question time though: are these vulnerabilities only 'real' if the device in question is exposed to the internet / port forwarding to internal? i.e., if a 'bad' device is behind a firewall, it will only pose a threat if someone can actually gain physical access to the network?

[@tin2001]

matt's debates Pretty much.... But remember you've got web browsers capable of running JavaScript that you use all day. One clever bit of JS, and your bad devices may suddenly be bots in a massive router botnet.

[@henryward8311]

...you use mac too!? I thought I was the only mac hacker - WHAT THE HAACCKK

[@slaxblake]

a question, when setting the ip can it be a public ip instead of a private ip that u put doing the video? because the way you do it you should already be in the wifi you are trying to pwn

[@mihirshah1056]

The ping only can be done if the firewall allows the icmp echo request and responses to the same, so even if the router if vulnerable with a good firewall, chances are you would never know about the vulnerability

[@tin2001]

Mihir Shah Blocking ICMP echo (and most other ICMP) is a bad idea. It breaks more than it solves... No hacker actually believes a lack of ping means he IP is down these days.

[@mihirshah1056]

tin2001 True...but can u list the disavantages of blocking icmp echo requests...thanx btw

[@kshitijkathuria9473]

Yeah that's an intuitive question...good work bro...keep it up

[@mihirshah1056]

Kshitij Kathuria thanx...

[@mrshoes1002]

What is the thing scanner you mentioned on your phone to do a similar nmap scan?

[@NullByteWHT]

Fing www.fing.io/

[@TemperedWambat]

My router is two years old and i havnt been able to update my firmware because there is no patch from the devolpers wtf =[

[@NullByteWHT]

supersonic118 Alex you should really get a new one, that's the worst case scenario.

[@ithraldharzul6887]

does openwrt, ddwrt, or tomato support it? those open source router opperating systems support a wide range of devices and often offer more features than the manufacturer defaults

[@blakel95]

Just do a factory reset and make strong passwords for router and wifi login.

[@Subjagator]

@@blakel95 Strong passwords don't help if there is an exploit vulnerability. As shown here when he connected to the device normally it asked for username/password but that didn't stop him dumping the config info using an exploit. I have no idea what was dumped but he said it was pretty bad so you really need to be able to update firmware when vulnerabilities are found.

[@TheAnalystradioprogram]

Hide your ESSID/BSSID (Network broadcast) to start with.

[@mc.doncardervisa7279]

Would this allow you to attack an IoT camera that allows connections from anywhere. Or would you have to be on the same network to target devices and only works with local IP addresses?

[@Brasuasd]

tyvm for teaching us, started a small project of security with some friends and well Im the only one that doesn`t know all this things...

[@tomnoyb8301]

Noob here. Are we saying someone can penetrate our firewall router to reach a port on our printer or other device, then leapfrog back into other devices on our network? Or worse, monitor all network traffic?

[@misbahuddin1897]

best as always_ bro make video on protocol downgrade attack,,,,,

[@johnconnor3829]

What is the title of the book behind and to the right of the guy talking? The big green book.

[@NullByteWHT]

Hi! I'm the guy talking. It's a book I grew up with: www.amazon.com/Codes-Ciphers-Secrets-Cryptic-Communication/dp/1579124852

[@johnconnor3829]

Null Byte Thanks, I'll grab a copy. I will have to try routersploit in future pentesting.

[@NullByteWHT]

I hope it serves you well in the war against the machines.

[@sihamkarbous9972]

How on earth u only have 150k subs

[@chrisberger9286]

So.. incredibly stupid question - trying to get a general understanding of this topic, but just started and frankly don't even know where to find the answer to this or how to ask it.... So, if one were to be using Routersploit to look for vulnerabilities, would one ever use a public IP address for a target? Or is it usually used with 192.168.1.1 ect (not sure what these IPs are called, intranetwork?). If it's usually used with 192.168.1.1, how does one target an outside location, as opposed to just looking at their own router constantly? An answer, or the above condensed to a searchable google question, is greatly appreciated

[@NullByteWHT]

You generally cannot log into a router from an external IP address

[@chrisberger9286]

@@NullByteWHT I'm fascinated by the subject.. but a little confused on this point of it specifically. If you don't mind answering another question or two, or if there's a better forum you'd suggest (strictly for white hat questions), I'd appreciate it.. So there is no way I could, hypothetically, from California target a Missouri router, find an open port with a vulnerability of some type, enter the network and upload a RAT to a computer? Or would router vulns typically be exploited for information leaks of some kind?

[@rohankumarshah5679]

amazing work dude!!

[@htown4652]

I have a pau05 and when I search for networks I cant find anything. Suggestions?

[@leontalkdaliy5894]

You are amazing super explanation and everything are clear that’s why I follow your channel thankx for information

[@NullByteWHT]

leon vita thanks for watching! Tell all of your friends about us! 😃

[@ffs4302]

Could you please suggest any setup (router, firewall, etc.) to secure our small company network? thanks

[@rasajacobin7105]

What terminal did you use? Itern is that for mac only what about window can you provide some link on description? correct me if im wrong

[@holybigpp1785]

music name "Xtract - Audiotool Day 2016"

[@MmDipro]

Can you do this over WAN?

[@deusvult4678]

very nice tut thanks ,but what about routers to which we are not connected ?

[@harry09_08]

Is routersploit is used to test switches also?

[@AjayKumar-fd9mv]

Hi, 1)Does Routersploit instalation has any malware or executable binaries as part of its payload which inturn can infect the computer on which Routersploit is run ? 2)Can Routersploit payload infect target router and make it vulnerable to further attack if I forgot to factory reset the router after test is run ?

[@cs777x]

Most malware payloads are jus botnets. For example ssh into routers with default user and pass and wgetting your payload to install your malicious bins onto that router to add to your botnet. Most routers use the mips bin.

[@NullByteWHT]

Too true!

[@smudgepost]

As this isn't open scanning/monitoring wireless networks, I don;t think a AWUS036ACH chipset wireless adapter is required, please confirm?

[@Synthetic-Chicken]

How does this work against ISP switches and routers? I had a play and I think I got right through to my internet providers main credentials.

[@D3rMesaa]

And how Do I get to know the IP Adress of a foreign Router to test it?

[@kutchve8198]

Same issue brother ], if u had find out than let me know.

[@alibaker8760]

Thank you very much for your hard work. We appreciate that.

[@catlover8967]

I like the pics of the cat in the background

[@grissgray]

If a device is Vulnerable on my network.. Dose that mean you'd have too be on my network too do take advantage of that vulnerability

[@BizcochitosNeko]

Very good Talk, informative!

[@tamaboy62]

help sir...why my routersploit any notification bellow TypeError: '>=' not supported between instances of 'tuple' and 'int'

[@npenope7636]

In the distance you see a potato. Like if you saw a potato after reading this.

[@Ash_Pirate]

i'm getting error when i run this command: python3 -m pip install -r requirements.txt error: /usr/local/bin/python3: No module named pip but i've installed it using command : apt-get install python3-pip so what should i do now to work it?

[@Sam-gd4xp]

What is the name of second suggested port scanner. First was nmap, second one souded like 'thin' or 'thing' !?

[@NullByteWHT]

Fing network scanner

[@flex6398]

Nullbyte please help me out will this also work on someones else router i mean you can het there information or Just your own router 🤷🏻‍♂️🤷🏻‍♂️

[@CristiVladZ]

do antivirus or malwarebytes detect infection with this?

[@MarsAsmr2.0]

I know this video is from along time ago but how do you fix the issue exploit failed could not extract credentials?

[@Alm1r]

if i keep watching ur videos i may end up in the big brother

[@mrdiamond64]

6:09 What command did you use to scan the network for ports? Does the command work on kali Linux? I’m trying it but it’s not working

[@Artook]

he used nmap to look for open ports. The prompt is : nmap -p 80,8080,8081,81 /24

[@bilalmazhar100]

which router and version of router you use ?

[@listerofsmeg9932]

Is this as straightforward in user land?

[@ashtondarrengoh2001]

Hi if I put a clock to monitor the time in the background if someone freezes my IP camera is it accurate to say the date and time stamp on the IP camera would not coincide with the actual clock in the background of the camera footage?

[@iteachcyber5713]

Do you have to be connected to a network to use routersploit?

[@pxdb8028]

Yes you have to be connect to the network you want to use it on

[@novax6212]

Hi dude what wireless adapter should i buy for my parrot sec os virtual machine ?

[@xp0z]

You should be able to use your computer's standard adapter

[@русскийдруг-е2х]

Thanks you brother i like you presentations !!!

[@ferzeliy3v]

Hello, I have a term, how can I do it, because I have ipv4 or ipv6 writes because I don't write ip address, help me

[@ottodobermann2030]

Awesome and easy! Thx. Have a nice day.