Exploit a Router Using RouterSploit [Tutorial]

[@maxpayne438]

I asked my router for concent, and it blinked...guess it is okay with this

[@3rdvoidmen594]

Underrated comment

[@luiscastillo6615]

Hey how do I open routersploit I cant open it and I install it help

[@NinjaHempKnight]

@@luiscastillo6615 make sure you are root: sudo routersploit [ENTER]

[@brothersgta339-jb1ld]

​eat chickens 😂

[@brandenminton3418]

Found two vulnerabilities on my router thanks to this! Then I found out that xfinity doesn't allow users to update the hardware they provide. Guess who just ordered a new router? Thanks for this video.

[@illuminatiilluminati9836]

Please make a full course on ethical hacking...

[@fredericchopin7639]

@Richard Vaughn what you are talking about is illegal im pretty sure. If you really want to you should go to the deep web.

[@joemccormick9348]

@@fredericchopin7639 u crack me up

[@fredericchopin7639]

Joe McCormick can you explain why

[@joemccormick9348]

Your general lack of knowledge that its perfectly fine to put it on the internet and your general complete misconception of what the dark web is entirely

[@fredericchopin7639]

@@joemccormick9348 And why do you think so? There are many helpful forums for hackers on the dark web. He wont be able to find unethical hacking courses on youtube so i suggested him to check out the forums on the dark web. whats so wrong about that.

[@Drael1024]

Just discovered your channel and I have to say, your content is amazing! Also thank you for this video.

[@emtdavis]

I came here to say the same as Tibor - great stuff, man. Keep up the excellent work!

[@enos5192]

Hey I know U

[@juanp5308]

Bro u are the guy of linus tech tips!

[@norsendo6532]

Lil note (HE DOESNT BLINK!)

[@roykibet6038]

Imagine having this guy as your next door neighbor 😅😅

[@mono9237]

would be cool, i would ask him for teaching :D

[@ajinkc1031]

@Nguyen Dang Duy Khang i dont think he would do that

[@mikemaschine22]

i would only run wires no wifi xD

[@J2897Tutorials]

A distant physical location wouldn't provide safety. He can attack from both the LAN and the WAN.

[@dashdashdash_]

@@J2897Tutorials And he also might test your locks whilst you're out at work...

[@mlgamer5547]

I want to say that once i was a beginner i learned all from this channel. I wish this channel could reach 1 m subscribe before 2021

[@trentcarr1939]

teach me your ways

[@jeonghutamilim2259]

ISP's like to implement TR-069 backdoor into things

[@Jackaldev]

2:46 I thought he was having a stroke for a second.

[@capalert1301]

Jackal cool to see you here...

[@Jackaldev]

Wym?

[@Jackaldev]

Yep

[@colt8110]

Jackaldev i saw you from the lanc vids

[@5entience626]

Lmfaooo

[@crimsontorso4126]

Hawaiian routers are mostly unsecured, as a large amount of botnets (mostly mirais) use these routers by using a set list of 0days. Also, thanks for the

[@platinumpython9312]

Everybody makes errors, makes more sense to continue the video than to edit it. Great stuff, your way of explanation is super smooth. Would appreciate a video of you creating Persistence USB, without LUK. Thank you!

[@lennovo9525]

Omg. It blinks at 1:20. He may be human after all. Great channel.

[@hotwoodgaming5795]

You need an online course for this stuff man great channel btw

[@psknhegem0n593]

Thanks for your awsome job mate! It's clearly not rewarded enough!

[@grimssouls3897]

I managed to get into my own router. My creds weren't vulnerable, but rom0 and another thing like cmd was. I was able to run payloads/commands directly from my computer. My skill level doesn't know what to do with the vulnerabilities I got, but I do know that it could reak havoc on my router.

[@tibielias]

Thanks for the video! I scanned all my devices at home. Routersploit has only found devices where the 6-9 vulnearbilities (on various ports) couldn't be verified. Is there a way to try to get a better picture whether these devices are really vulnearble or not? Can you group together these unverified exploits and run them individually using RouterSploit? Update: Never mind. I tinkered with it a bit and got it to work! Pretty powerful tool, I have to say. Many of the payloads might need some fine tuning since they crash the CLI with silly errors such as "unorderable types" when comparing tuples and such. Nothing that couldn't be fixed.

[@C-j-m-218]

Well if they have the exploits see if you can hack it

[@KayvonGz]

Charles Mills Shouldn’t have to, the scanners Routersploit uses is trash.

[@rage7658]

that introduction is one hell of a ride

[@NullByteWHT]

We shot that and a commercial for a donut store in the same two hour period

[@rage7658]

Null Byte Oh my god 😂

[@shmehfleh3115]

This RouterSploit program is cool and all, (and it's definitely good advice to keep your stuff patched), but if it requires you to be on the inside of the network anyway, then the damage is already done. At that point, having your IP cam hijacked is the least of your concerns.

[@djnikx1]

yup, he missed to mention that..

[@christianhernandez4573]

Awesome video man, I love your work. Thank you for putting this information out into the world. I can guarantee you will inspiring people to do great things by sparking their curiosity. Again Thank you

[@dr--a]

Awesome stuff Bro, I agree you should make a course on ethical hacking 👍🏼

[@rafeinnit8114]

I dont have a port setting in my target options?

[@Kurkeyyy]

So you can use router split for your own good to see if your router is good?

[@MirkWoot]

Right away when i heard "Easy python script", I thought.. "No, not simple or easy" haha.. then there are requirements, and commands :P. I can figure this out, and know there is target audience. I just thought it was a little fun anyway as it also takes a little more knowing things than the average person.

[@techtweakstv]

Nice video! but if that cam was a sample, maybe you can create a dummy info or vulnerability so that we can see the information given on that exploit and how we can check the credentials and logged in. .:)

[@rkan2]

Yeah… I completely left hanging by what was pwned!

[@georgek4416]

1:30 I was looking at this cute cat and not listening you. I had to rewatch this part.

[@NullByteWHT]

if it was the fat angel behind me then I don't blame you

[@georgek4416]

@@NullByteWHT lol

[@plutoboy8827]

Awesome man!!! Going to hit 1 lakh subs soon...

[@NullByteWHT]

pluto boy thank you!

[@thejestersrealm7965]

*Says legal disclaimer* Black hats: “that is merely a suggestion”

[@ricarprieto]

You're awesome! I just discovered your channel... how many wasted minutes on youtube before you! Thank you for your videos

[@jamesnduati7083]

I would like to see this channel get 1m subscribers very soon.

[@AjayKumar-fd9mv]

Hi, 1)Does Routersploit instalation has any malware or executable binaries as part of its payload which inturn can infect the computer on which Routersploit is run ? 2)Can Routersploit payload infect target router and make it vulnerable to further attack if I forgot to factory reset the router after test is run ?

[@fawwazchiwne8611]

Explanation man ♥️

[@slaxblake]

a question, when setting the ip can it be a public ip instead of a private ip that u put doing the video? because the way you do it you should already be in the wifi you are trying to pwn

[@squiggerzzzz]

Like a few others have mentioned, the “set port” command was giving me trouble too (on MacOS), but in the list of usable options it displayed it appears maybe routersploit got an update and now the command is set http_port 80 (or whatever port you want). Awesome vids btw NB, whenever my brain shifts into inquisitive mode during the day I try to come back to pick up another topic I’m unfamiliar with. Thank you for sharing the intel!

[@outlaw8379]

I've been learning these types of things for a while and always wondered is it possible to find out a WiFi BSSID and Channel even if the router is in another country? I can perform the basic DoS on any network im within range for, however my friend who lives in Scotland volunteered that I can pentest his Router, is there anyway of doing so? Sorry, im a newbie to ethical hacking and cyber security

[@mc.doncardervisa7279]

Would this allow you to attack an IoT camera that allows connections from anywhere. Or would you have to be on the same network to target devices and only works with local IP addresses?

[@TheAnalystradioprogram]

I burst out laughing the way you said “Definitely illegal” because you already know I’m gonna do it. Omg. You might have well have said “Yea fuck it, you people are on your own” Lol

[@smudgepost]

As this isn't open scanning/monitoring wireless networks, I don;t think a AWUS036ACH chipset wireless adapter is required, please confirm?

[@MrCipek1221]

It's awesome to see tool made in poland in your video :)) greetings from pl :)

[@tamaboy62]

help sir...why my routersploit any notification bellow TypeError: '>=' not supported between instances of 'tuple' and 'int'

[@joincryptouk]

Great video on a very nice tool to play with on your own network.

[@Steven-wo9bm]

You......are......amazing bro. You are my teacher.

[@ferzeliy3v]

Hello, I have a term, how can I do it, because I have ipv4 or ipv6 writes because I don't write ip address, help me

[@rasajacobin7105]

What terminal did you use? Itern is that for mac only what about window can you provide some link on description? correct me if im wrong

[@ashtondarrengoh2001]

Hi if I put a clock to monitor the time in the background if someone freezes my IP camera is it accurate to say the date and time stamp on the IP camera would not coincide with the actual clock in the background of the camera footage?

[@_crys_]

The only thing I don't get: you're doing the scan and exploitation on the internal network. How does the vpnfilter malware or anyone malicious access these ports that are only open internally? If you type in someone's IP address into your browser, you won't see their router's web configuration panel...

[@holybigpp1785]

music name "Xtract - Audiotool Day 2016"

[@mrshoes1002]

What is the thing scanner you mentioned on your phone to do a similar nmap scan?

[@NullByteWHT]

Fing www.fing.io/

[@ne12bot94]

Great video , keep up the excellent work.

[@MarsAsmr2.0]

I know this video is from along time ago but how do you fix the issue exploit failed could not extract credentials?

[@porlando12]

Thanks for the vid. I was able to get this running on my Rpi!

[@Synthetic-Chicken]

How does this work against ISP switches and routers? I had a play and I think I got right through to my internet providers main credentials.

[@gellordraz7442]

What command do ineed i start if i have already downlkaded in termux the routersploit

[@Aniruddh-_]

Just had a doubt can we do this on windows installed kali linux WLA 2 device?

[@mrdiamond64]

6:09 What command did you use to scan the network for ports? Does the command work on kali Linux? I’m trying it but it’s not working

[@Artook]

he used nmap to look for open ports. The prompt is : nmap -p 80,8080,8081,81 /24

[@mrj2904]

Just to wrap my head around things. It makes sense to do this on your own network that you are connected to. But can you do this to other routers remotely? If you use a public ip address ? Is this possible ? Or do you need to be connected to the router you are trying to exploit ? Any help and advice would be appreciated. To clarify I’m learning / have consent from others 😂

[@5wholepizzas284]

I think u have to be in the routers network before u can exploit it

[@DormirnaodaXP]

Hello null byte team am I again, congratulations for your good work on youtube, I would like to ask a video teaching how to capture information on smartphones and laptops on the same wi-fi network as us!

[@htown4652]

I have a pau05 and when I search for networks I cant find anything. Suggestions?

[@Ash_Pirate]

i'm getting error when i run this command: python3 -m pip install -r requirements.txt error: /usr/local/bin/python3: No module named pip but i've installed it using command : apt-get install python3-pip so what should i do now to work it?

[@ffs4302]

Could you please suggest any setup (router, firewall, etc.) to secure our small company network? thanks

[@JohnTheRipper143]

hello,I love your videos,but I'm curious about what classes I should take in order to become a professional pentester. what type of books should I read? please help

[@HeadlampMafia]

I also am curious. This sort of thing has always fascinated me, but I never allowed myself the time to dig into it

[@Subjagator]

@@HeadlampMafia My suggestion would be to find a company that specialises in penetration testing and ask them what they typically look for when they are hiring people. That will give you a decent idea for what is required and you can go from there.

[@Sam-gd4xp]

What is the name of second suggested port scanner. First was nmap, second one souded like 'thin' or 'thing' !?

[@NullByteWHT]

Fing network scanner

[@ruyariyax7948]

What app do you use to type in all the URL and stuff?? I mean the app which had Black Background and you Type in Green. Please Help!!!

[@flex6398]

Nullbyte please help me out will this also work on someones else router i mean you can het there information or Just your own router 🤷🏻‍♂️🤷🏻‍♂️

[@mrtgsy]

Thanks... spent the night beasting my network looking for issues. None found, which is good. Potentially stupid question time though: are these vulnerabilities only 'real' if the device in question is exposed to the internet / port forwarding to internal? i.e., if a 'bad' device is behind a firewall, it will only pose a threat if someone can actually gain physical access to the network?

[@tin2001]

matt's debates Pretty much.... But remember you've got web browsers capable of running JavaScript that you use all day. One clever bit of JS, and your bad devices may suddenly be bots in a massive router botnet.

[@noegsoegek9298]

why i'm failed using routersploit for IP Public? only work at local network. any suggest for that?

[@kenmeacham7025]

All I get on routersploit is errors what do you do when you put in use scanners/autopwn and it says no module named routersploit module scanners autopwn

[@mrsmith7093]

what commands to scan with nmap inside routersplot like you did ?

[@johnconnor3829]

What is the title of the book behind and to the right of the guy talking? The big green book.

[@NullByteWHT]

Hi! I'm the guy talking. It's a book I grew up with: www.amazon.com/Codes-Ciphers-Secrets-Cryptic-Communication/dp/1579124852

[@johnconnor3829]

Null Byte Thanks, I'll grab a copy. I will have to try routersploit in future pentesting.

[@NullByteWHT]

I hope it serves you well in the war against the machines.

[@CristiVladZ]

do antivirus or malwarebytes detect infection with this?

[@PaulBadman]

Would OEM ISP routers be at a greater risk than a store bought router?

[@NullByteWHT]

Paul Badman ISP routers are worse

[@PaulBadman]

Thought that would be the case,However thought I would ask anyway

[@PaulBadman]

DD-WRT is down at the moment and my router isn't supported by open-WRT (I changed provider and old router broke),However I'm looking for a new router mainly because this one is bullshit for streaming files from NAS to over devices I would really like one with a 4G back up on it but I doubt I would ever use the 4G function lol

[@PaulBadman]

what do you need to hack? Most people have their profile public and the answer to their email security question on their profile. as long as you get their email thats tied to their account you could just reset the P/w and jump in,It's been a while since I done anything like this so I wouldn't know if that still works

[@benjaminallread4656]

thank you so much I love your channel I just tested this out on my own router and I actually got in this is my first real life hack I AM SO EXCITED THANK YOU SO MUCH I LOVE YOU

[@zephyr1018]

Your voice is like an angel nice video 😇

[@geminivegan6587]

Where can i find a full length of you teaching cyber security ?????

[@chandramaulichakraborty6787]

@Null Byte, Please help me with how you have changed your os to mac osx.

[@ciddiciddi7542]

When I run show options, I can only set target not port. Why ???

[@misbahuddin1897]

best as always_ bro make video on protocol downgrade attack,,,,,

[@kumaryadav4256]

cmd-use scanners/autopwn is giving me error(dictionary keys changed during iteration). Could you help me with this please..

[@tomnoyb8301]

Noob here. Are we saying someone can penetrate our firewall router to reach a port on our printer or other device, then leapfrog back into other devices on our network? Or worse, monitor all network traffic?

[@deusvult4678]

very nice tut thanks ,but what about routers to which we are not connected ?

[@MmDipro]

Can you do this over WAN?

[@SirKrazzy]

i found this 3com officeconnect rce exploitable router and i did it but i dont rly understand what to do next it apparently allows me to send commands from the command line..?

[@rajkumar-ik8cd]

so ur Macosx commands wont suit other OS ? if so,what comands do i type for other OSX's?

[@matkosladek]

If you mean the installation commands then go to github.com/threat9/routersploit scroll down and find the installation commands for your OS. If you mean the routersploit commands, I think they are the same on every OS because it is the same tool just on different OS. Hope this helps you

[@ItaLiaNKiinG94]

Hey guys I have a little problem with scanning with autopwn, it scans and everything but once it's done it says :Could not find default credentials, I just want to make sure that's normal and if not how can I fix it? Thanks

[@harry09_08]

Is routersploit is used to test switches also?

[@grissgray]

If a device is Vulnerable on my network.. Dose that mean you'd have too be on my network too do take advantage of that vulnerability

[@novax6212]

Hi dude what wireless adapter should i buy for my parrot sec os virtual machine ?

[@xp0z]

You should be able to use your computer's standard adapter

[@wesleyvaleran394]

Great video kody like always😁 ive been playing with routersploit since last year but recently got some error(python 3) but i guess it will be fixed with a pip upgrade anyways i hope to see more videos like this that are not based on hardware or anything of a kind(tried your wireless attack videos unfortunately my wifi card only supports monitor mode not packet injections)😅 could you do a video on how these attack/exploits are automated, like vpnfilter/botnet ? Keep up the good work😁

[@NullByteWHT]

Wesley Valeran glad you enjoy them! I'll be trying some basic python exploits soon.

[@TemperedWambat]

My router is two years old and i havnt been able to update my firmware because there is no patch from the devolpers wtf =[

[@NullByteWHT]

supersonic118 Alex you should really get a new one, that's the worst case scenario.

[@ithraldharzul6887]

does openwrt, ddwrt, or tomato support it? those open source router opperating systems support a wide range of devices and often offer more features than the manufacturer defaults

[@blakel95]

Just do a factory reset and make strong passwords for router and wifi login.

[@Subjagator]

@@blakel95 Strong passwords don't help if there is an exploit vulnerability. As shown here when he connected to the device normally it asked for username/password but that didn't stop him dumping the config info using an exploit. I have no idea what was dumped but he said it was pretty bad so you really need to be able to update firmware when vulnerabilities are found.

[@TheAnalystradioprogram]

Hide your ESSID/BSSID (Network broadcast) to start with.

[@ulim8]

Great video, thanks for contributing it! One thing that gets me though, that black book in the background with the yellow font, what is it? It seems so familiar to me....

[@NullByteWHT]

It's called "the code book"

[@NullByteWHT]

I got that wrong, it's "codes, ciphers, secrets and cryptic communication"

[@ulim8]

Thanks muchly! I knew i recognised it! Choice!

[@Brasuasd]

tyvm for teaching us, started a small project of security with some friends and well Im the only one that doesn`t know all this things...

[@j.rumbleseed]

got it finally. thanx much for this tutorial.

[@sihamkarbous9972]

How on earth u only have 150k subs

[@adityajoshi321]

Do I have to be already authenticated on a WiFi network for this to work? I set everything up and tried on my home router and it shows could not confirm any vulnerability and could not find any credentials

[@DeanoboiROTMG]

very informative just goes to show how vulnerable everyone truly is and they dont even know it

[@ericimi]

Love this series.

[@sundarbn786]

If I update my router then, it won't anymore let me set QOS for a range of IPs: I'd have to specify individual IPs. This is why I reinstalled an earlier version. Perhaps, the manufacturer decided to do away with the range facility for the sake of performance maybe, I don't know.

[@mihirshah1056]

The ping only can be done if the firewall allows the icmp echo request and responses to the same, so even if the router if vulnerable with a good firewall, chances are you would never know about the vulnerability

[@tin2001]

Mihir Shah Blocking ICMP echo (and most other ICMP) is a bad idea. It breaks more than it solves... No hacker actually believes a lack of ping means he IP is down these days.

[@mihirshah1056]

tin2001 True...but can u list the disavantages of blocking icmp echo requests...thanx btw

[@kshitijkathuria9473]

Yeah that's an intuitive question...good work bro...keep it up

[@mihirshah1056]

Kshitij Kathuria thanx...

[@nmconejo25]

what should I do with these blind command injection

[@leontalkdaliy5894]

You are amazing super explanation and everything are clear that’s why I follow your channel thankx for information

[@NullByteWHT]

leon vita thanks for watching! Tell all of your friends about us! 😃

[@D3rMesaa]

And how Do I get to know the IP Adress of a foreign Router to test it?

[@kutchve8198]

Same issue brother ], if u had find out than let me know.

[@luisbriceno3303]

How do I do to use routersploit with a remote router that, I mean, if I'm not connected to that WiFi... I've seen in the video that the IP is local.