In this and in the next video, I want to talk about something different, we attacked different machines
from Windows machines to Linux machines.
But in these two videos, I want to show you that you can also target your own router or the router
from the network that you are attacking.
Now, it might seem that it is not that important to test your router, but once you gain access to
the router, you pretty much have the control over the entire network.
And not only that, gaining access to the router is powerful.
It means that you can change different network settings, that you can forward different ports and so
on and so on.
The routers are also the easiest devices to hack.
You might be asking why?
Well, because usually 90 percent of home routers and home devices have default login passwords.
The vendors who provide homes with their routers never really change.
The default password and default password is something that you can find on the Internet.
This default password attacks, we are going to check out in the next tutorial, but for this one,
I want to show you a cool tool that you can use to test on your own router to check out whether it is
vulnerable to some exploits.
So just type in your search bar router split and it will lead you to this GitHub link where we will
have our router deployed to.
Now, we already know how to download all of these tools, let's copy the link straight away, navigate
to our desktop and we can get clone.
Rather split.
While this is coping, let's go down to the installation comments just to see how we can install this
talk properly, and here we have installation clinics and all of the comments that we must run.
So we must install Python three to tape, even though I believe we already have this.
Let's run the command just to make sure.
And it requires road privileges.
So let's enter the router count first and let's type the same comment.
Atget get install Python three that pipe, everything is installed.
Let's move on to the next comment.
We already did the Kip clone.
Let's change the directory to router split.
And the next comment is Python three.
And then install the requirements, as we can see inside of the Rajput directory, we have requirements
that the text fall.
And whenever you have these requirements that the extent we already know that we must run this command
to install all the requirements from that file.
Let's press enter as soon as it insults all of these files that it needs, we should be ready to run
the right talk, which is this RCF that by.
OK, so everything is finished and let's python three hours F that B white, and you will notice that
once you run this tool, it will open something that looks similar to the MSF council.
If we get this command line type in here, we can execute different commands.
It says right here that has one hundred thirty two experts for scanner's one hundred and seventy one
credentialled tax for generic attacks, 32 payloads and six encoders.
Now to check out all of the available commands, we can run health command and it will tell us how to
use a certain module, how to execute a command argument.
And here we can also search for different tools for type search scanners.
It will give us all of the four scanners that it has.
And in this video, we're going to use this out and scan.
This will test for all the exploits from the routers play tool on to our target router to see whether
it is vulnerable to any one of them.
So let's use scanners and then how to end.
Once you select it, you can type help or pardon me, you can type show options the same way that we
do inside of the MSF council and the only thing that we must set is target IP address.
To do that, we can type set target 180 to that 168.
That one.
This is the router.
In my case, if you want to check out your gateway or your router, you can type the command network
that bash and ah and under the gateway you will have the IP address of your gateway.
Once you check it out, type it right here and as soon as you set your IP address, you can type run.
As it says, it will start a vulnerability check and it will go through all of these experts and see
whether your router is vulnerable to any one of the.
If you have this minus sign, that means that the Rothera is not vulnerable, if you have this star
sign, that means triploid cannot really determine whether your router is vulnerable to the security
threat.
As it says right here, it could not be verified.
And if you have a plus sign, which we don't have at the moment, that means it found a security vulnerability
for your router.
In my case, I believe I don't have any at the moment, but you might find some vulnerability for the
router.
Let's wait for this scan to finish.
And it is done, it says, could not confirm any vulnerability and it couldn't find default credentials,
and this part of it here is not exactly true.
We're going to check out default credentials in the next video.
However, you can test these exploits with the raw display.
You can also check out these ones that says could not verify, exploit ability.
This could possibly mean that they are vulnerable to these attacks or this exploit is simply just not
the type of exploit that targets your daughter.
OK, now, if you cover the raw data, we're going to see how we can gain access to the router with
the default credentials vulnerability that at least 70 to 80 percent of home routers have seen in the
next video.