Exploit a Router Using RouterSploit [Tutorial]

Our Premium Ethical Hacking Bundle Is 90% Off: nulb.app/cwlshop
How to Attack Network Devices with RouterSploit Tutorial
Full Tutorial: nulb.app/x4549
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Cyber Weapons Lab, Episode 018
In this video, we're exploring RouterSploit, which shows you just how easy it is to get started with router hacking - even if you're a beginner white hat hacker or pentester. This program works on Linux distros like Kali, macOS, and Windows.
To learn more, check out the article: nulb.app/x4549
Follow Null Byte on:
Twitter: / nullbyte
Flipboard: flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/channels/nullbyte

[@maxpayne438]

I asked my router for concent, and it blinked...guess it is okay with this

[@3rdvoidmen594]

Underrated comment

[@luiscastillo6615]

Hey how do I open routersploit I cant open it and I install it help

[@NinjaHempKnight]

@@luiscastillo6615 make sure you are root: sudo routersploit [ENTER]

[@brandenminton3418]

Found two vulnerabilities on my router thanks to this! Then I found out that xfinity doesn't allow users to update the hardware they provide. Guess who just ordered a new router? Thanks for this video.

[@illuminatiilluminati9836]

Please make a full course on ethical hacking...

[@fredericchopin7639]

@@tripplefives1402 what you are talking about is illegal im pretty sure. If you really want to you should go to the deep web.

[@joemccormick9348]

@@fredericchopin7639 u crack me up

[@fredericchopin7639]

Joe McCormick can you explain why

[@joemccormick9348]

Your general lack of knowledge that its perfectly fine to put it on the internet and your general complete misconception of what the dark web is entirely

[@fredericchopin7639]

@@joemccormick9348 And why do you think so? There are many helpful forums for hackers on the dark web. He wont be able to find unethical hacking courses on youtube so i suggested him to check out the forums on the dark web. whats so wrong about that.

[@psknhegem0n593]

Thanks for your awsome job mate! It's clearly not rewarded enough!

[@roykibet6038]

Imagine having this guy as your next door neighbor 😅😅

[@mono9237]

would be cool, i would ask him for teaching :D

[@ajinkc1031]

@Nguyen Dang Duy Khang i dont think he would do that

[@mikemaschine22]

i would only run wires no wifi xD

[@J2897Tutorials]

A distant physical location wouldn't provide safety. He can attack from both the LAN and the WAN.

[@dashdashdash_]

@@J2897Tutorials And he also might test your locks whilst you're out at work...

[@Drael1024]

Just discovered your channel and I have to say, your content is amazing! Also thank you for this video.

[@emtdavis]

I came here to say the same as Tibor - great stuff, man. Keep up the excellent work!

[@enos5192]

Hey I know U

[@juanp5308]

Bro u are the guy of linus tech tips!

[@norsendo6532]

Lil note (HE DOESNT BLINK!)

[@christianhernandez4573]

Awesome video man, I love your work. Thank you for putting this information out into the world. I can guarantee you will inspiring people to do great things by sparking their curiosity. Again Thank you

[@crimsontorso4126]

Hawaiian routers are mostly unsecured, as a large amount of botnets (mostly mirais) use these routers by using a set list of 0days. Also, thanks for the

[@jeonghutamilim2259]

ISP's like to implement TR-069 backdoor into things

[@hotwoodgaming5795]

You need an online course for this stuff man great channel btw

[@dr.-a]

Awesome stuff Bro, I agree you should make a course on ethical hacking 👍🏼

[@porlando12]

Thanks for the vid. I was able to get this running on my Rpi!

[@fawwazchiwne8611]

Explanation man ♥️

[@Jackaldev]

2:46 I thought he was having a stroke for a second.

[@capalert1301]

Jackal cool to see you here...

[@Jackaldev]

Wym?

[@Jackaldev]

Yep

[@colt8110]

Jackaldev i saw you from the lanc vids

[@5entience626]

Lmfaooo

[@mlgamer5547]

I want to say that once i was a beginner i learned all from this channel. I wish this channel could reach 1 m subscribe before 2021

[@trentcarr1939]

teach me your ways

[@lennovo9525]

Omg. It blinks at 1:20. He may be human after all. Great channel.

[@platinumpython9312]

Everybody makes errors, makes more sense to continue the video than to edit it. Great stuff, your way of explanation is super smooth. Would appreciate a video of you creating Persistence USB, without LUK. Thank you!

[@sexurityanalyst]

Good work. Love the tutorial

[@ne12bot94]

Great video , keep up the excellent work.

[@grimssouls3897]

I managed to get into my own router. My creds weren't vulnerable, but rom0 and another thing like cmd was. I was able to run payloads/commands directly from my computer. My skill level doesn't know what to do with the vulnerabilities I got, but I do know that it could reak havoc on my router.

[@j.rumbleseed]

got it finally. thanx much for this tutorial.

[@joincryptouk]

Great video on a very nice tool to play with on your own network.

[@ricarprieto]

You're awesome! I just discovered your channel... how many wasted minutes on youtube before you! Thank you for your videos

[@MrCipek1221]

It's awesome to see tool made in poland in your video :)) greetings from pl :)

[@rage7658]

that introduction is one hell of a ride

[@NullByteWHT]

We shot that and a commercial for a donut store in the same two hour period

[@rage7658]

Null Byte Oh my god 😂

[@ericimi]

Love this series.

[@misbahuddin1897]

best as always_ bro make video on protocol downgrade attack,,,,,

[@BearMeat4Dinner]

I wish you could make an updated video! Great video!

[@MirkWoot]

Right away when i heard "Easy python script", I thought.. "No, not simple or easy" haha.. then there are requirements, and commands :P. I can figure this out, and know there is target audience. I just thought it was a little fun anyway as it also takes a little more knowing things than the average person.

[@tibielias]

Thanks for the video! I scanned all my devices at home. Routersploit has only found devices where the 6-9 vulnearbilities (on various ports) couldn't be verified. Is there a way to try to get a better picture whether these devices are really vulnearble or not? Can you group together these unverified exploits and run them individually using RouterSploit? Update: Never mind. I tinkered with it a bit and got it to work! Pretty powerful tool, I have to say. Many of the payloads might need some fine tuning since they crash the CLI with silly errors such as "unorderable types" when comparing tuples and such. Nothing that couldn't be fixed.

[@Charlesmillz]

Well if they have the exploits see if you can hack it

[@KayvonGz]

Charles Mills Shouldn’t have to, the scanners Routersploit uses is trash.

[@BizcochitosNeko]

Very good Talk, informative!

[@Steven-wo9bm]

You......are......amazing bro. You are my teacher.

[@alibaker8760]

Thank you very much for your hard work. We appreciate that.

[@Brasuasd]

tyvm for teaching us, started a small project of security with some friends and well Im the only one that doesn`t know all this things...

[@DormirnaodaXP]

Hello null byte team am I again, congratulations for your good work on youtube, I would like to ask a video teaching how to capture information on smartphones and laptops on the same wi-fi network as us!

[@squiggerzzzz]

Like a few others have mentioned, the “set port” command was giving me trouble too (on MacOS), but in the list of usable options it displayed it appears maybe routersploit got an update and now the command is set http_port 80 (or whatever port you want). Awesome vids btw NB, whenever my brain shifts into inquisitive mode during the day I try to come back to pick up another topic I’m unfamiliar with. Thank you for sharing the intel!

[@plutoboy8827]

Awesome man!!! Going to hit 1 lakh subs soon...

[@NullByteWHT]

pluto boy thank you!

[@jamesnduati7083]

I would like to see this channel get 1m subscribers very soon.

[@rohankumarshah5679]

amazing work dude!!

[@catlover8967]

I like the pics of the cat in the background

[@techtweakstv]

Nice video! but if that cam was a sample, maybe you can create a dummy info or vulnerability so that we can see the information given on that exploit and how we can check the credentials and logged in. .:)

[@rkan2]

Yeah… I completely left hanging by what was pwned!

[@benjaminallread4656]

thank you so much I love your channel I just tested this out on my own router and I actually got in this is my first real life hack I AM SO EXCITED THANK YOU SO MUCH I LOVE YOU

[@rafeinnit8114]

I dont have a port setting in my target options?

[@CristiVladZ]

do antivirus or malwarebytes detect infection with this?

[@leontalkdaliy5894]

You are amazing super explanation and everything are clear that’s why I follow your channel thankx for information

[@NullByteWHT]

leon vita thanks for watching! Tell all of your friends about us! 😃

[@user-sv5bz8um6c]

Thanks you brother i like you presentations !!!

[@wesleyvaleran394]

Great video kody like always😁 ive been playing with routersploit since last year but recently got some error(python 3) but i guess it will be fixed with a pip upgrade anyways i hope to see more videos like this that are not based on hardware or anything of a kind(tried your wireless attack videos unfortunately my wifi card only supports monitor mode not packet injections)😅 could you do a video on how these attack/exploits are automated, like vpnfilter/botnet ? Keep up the good work😁

[@NullByteWHT]

Wesley Valeran glad you enjoy them! I'll be trying some basic python exploits soon.

[@thejestersrealm7965]

*Says legal disclaimer* Black hats: “that is merely a suggestion”

[@outlaw8379]

I've been learning these types of things for a while and always wondered is it possible to find out a WiFi BSSID and Channel even if the router is in another country? I can perform the basic DoS on any network im within range for, however my friend who lives in Scotland volunteered that I can pentest his Router, is there anyway of doing so? Sorry, im a newbie to ethical hacking and cyber security

[@EDUTECH5.0]

excelente video saludos desde Argentina

[@mc.doncardervisa7279]

Would this allow you to attack an IoT camera that allows connections from anywhere. Or would you have to be on the same network to target devices and only works with local IP addresses?

[@trooperthatsall5250]

Excellent video my friend; well and truly subbed. I'm not often impressed; you have done that. ~ Trooper

[@justintamrin3292]

Dude you are inspiring me

[@megustaeljamonelchorizoylo560]

Will check it, awesome

[@ffs4302]

Could you please suggest any setup (router, firewall, etc.) to secure our small company network? thanks

[@shmehfleh3115]

This RouterSploit program is cool and all, (and it's definitely good advice to keep your stuff patched), but if it requires you to be on the inside of the network anyway, then the damage is already done. At that point, having your IP cam hijacked is the least of your concerns.

[@djnikx1]

yup, he missed to mention that..

[@zephyr1018]

Your voice is like an angel nice video 😇

[@slaxblake]

a question, when setting the ip can it be a public ip instead of a private ip that u put doing the video? because the way you do it you should already be in the wifi you are trying to pwn

[@sihamkarbous9972]

How on earth u only have 150k subs

[@holybigpp1785]

music name "Xtract - Audiotool Day 2016"

[@d1ordior-539]

So you can use router split for your own good to see if your router is good?

[@gatisaleksejavs6637]

Thanks :) i test this is working for me

[@rasajacobin7105]

What terminal did you use? Itern is that for mac only what about window can you provide some link on description? correct me if im wrong

[@georgek4416]

1:30 I was looking at this cute cat and not listening you. I had to rewatch this part.

[@NullByteWHT]

if it was the fat angel behind me then I don't blame you

[@georgek4416]

@@NullByteWHT lol

[@brettnieman3453]

Great video

[@ashtondarrengoh2001]

Hi if I put a clock to monitor the time in the background if someone freezes my IP camera is it accurate to say the date and time stamp on the IP camera would not coincide with the actual clock in the background of the camera footage?

[@htown4652]

I have a pau05 and when I search for networks I cant find anything. Suggestions?

[@misterxzxc7314]

What about the Zte zxhn108n 🤔🤔🤔

[@true_tamilan]

Great man. Thanks

[@smudgepost]

As this isn't open scanning/monitoring wireless networks, I don;t think a AWUS036ACH chipset wireless adapter is required, please confirm?

[@Ash_Pirate]

i'm getting error when i run this command: python3 -m pip install -r requirements.txt error: /usr/local/bin/python3: No module named pip but i've installed it using command : apt-get install python3-pip so what should i do now to work it?

[@Synthetic-Chicken]

How does this work against ISP switches and routers? I had a play and I think I got right through to my internet providers main credentials.

[@TheAnalystradioprogram]

I burst out laughing the way you said “Definitely illegal” because you already know I’m gonna do it. Omg. You might have well have said “Yea fuck it, you people are on your own” Lol

[@deusvult4678]

very nice tut thanks ,but what about routers to which we are not connected ?

[@SirKrazzy]

i found this 3com officeconnect rce exploitable router and i did it but i dont rly understand what to do next it apparently allows me to send commands from the command line..?

[@whobitmyneck]

SO YOUU'RE NULL BYTE!!! awesome

[@AjayKumar-fd9mv]

Hi, 1)Does Routersploit instalation has any malware or executable binaries as part of its payload which inturn can infect the computer on which Routersploit is run ? 2)Can Routersploit payload infect target router and make it vulnerable to further attack if I forgot to factory reset the router after test is run ?

[@mrsmith7093]

what commands to scan with nmap inside routersplot like you did ?

[@captainunderpants2816]

Love your intro

[@flex6398]

Nullbyte please help me out will this also work on someones else router i mean you can het there information or Just your own router 🤷🏻‍♂️🤷🏻‍♂️

[@Aniruddh-_]

Just had a doubt can we do this on windows installed kali linux WLA 2 device?

[@mrcheesysgamevision1656]

awesome VIDEO, LOV3 the content.

[@chandramaulichakraborty6787]

@Null Byte, Please help me with how you have changed your os to mac osx.

[@chuxxsss]

Quick question I loaded Kali on an Android device. Updated it and upgraded it too. Added python3 plus pip I think. Now after installing sherlock. I get a font error for colorama. Try pip install colorama no joy. Even downlaoded it's github page. Any help would be appericated. Have a nice day.

[@gellordraz7442]

What command do ineed i start if i have already downlkaded in termux the routersploit

[@bilalmazhar100]

which router and version of router you use ?

[@MikeNugget]

May be Qubes OS review with explanation/cases?

[@henryward8311]

...you use mac too!? I thought I was the only mac hacker - WHAT THE HAACCKK

[@mrtgsy]

Thanks... spent the night beasting my network looking for issues. None found, which is good. Potentially stupid question time though: are these vulnerabilities only 'real' if the device in question is exposed to the internet / port forwarding to internal? i.e., if a 'bad' device is behind a firewall, it will only pose a threat if someone can actually gain physical access to the network?

[@tin2001]

matt's debates Pretty much.... But remember you've got web browsers capable of running JavaScript that you use all day. One clever bit of JS, and your bad devices may suddenly be bots in a massive router botnet.

[@MarsAsmr2.0]

I know this video is from along time ago but how do you fix the issue exploit failed could not extract credentials?

[@Devilstory77]

Sir your all video is best , your telegram chennal are Available sir I like your All video

[@ulim8]

Great video, thanks for contributing it! One thing that gets me though, that black book in the background with the yellow font, what is it? It seems so familiar to me....

[@NullByteWHT]

It's called "the code book"

[@NullByteWHT]

I got that wrong, it's "codes, ciphers, secrets and cryptic communication"

[@ulim8]

Thanks muchly! I knew i recognised it! Choice!

[@ruyariyax7948]

What app do you use to type in all the URL and stuff?? I mean the app which had Black Background and you Type in Green. Please Help!!!

[@ottodobermann2030]

Awesome and easy! Thx. Have a nice day.

[@iteachcyber5713]

Do you have to be connected to a network to use routersploit?

[@mrshoes1002]

What is the thing scanner you mentioned on your phone to do a similar nmap scan?

[@NullByteWHT]

Fing www.fing.io/

[@ujjvalw2684]

Awesome

[@NullByteWHT]

Ujjval AKA THE *B.A.A.P* yeah you tell that guy

[@ferzeliy3v]

Hello, I have a term, how can I do it, because I have ipv4 or ipv6 writes because I don't write ip address, help me

[@sloneplace1901]

i have this problem in autopwn running module...... starting vulnerablity check.... after get this error TypeError: '>=' not supported between instances of 'tuple' and 'int' Routersploit version - 3.4.0 please help me please

[@zainuddinbrahim4625]

thanks dude