Technicolor C2100T - Revision history

Admin: /* Telnet */

2017-08-12T21:12:01Z

Telnet

← Older revision		Revision as of 21:12, 12 August 2017
Line 36:		Line 36:
	* Enable telnet from WAN or LAN		* Enable telnet from WAN or LAN

	'''NOTE: THIS IS <u>REALLY REALLY FREAKING IMPORTANT</u>: When you turn on telnet, it turns it on from BOTH sides - internal and external. Don't leave it on or your telnet server ~~could~~ get hammered in a ~~brute-force attack~~.'''		'''NOTE: THIS IS <u>REALLY REALLY FREAKING IMPORTANT</u>: When you turn on telnet, it turns it on from BOTH sides - internal and external. Don't leave it on, or else your telnet server will get hammered, a hacker will obtain root access, your router firmware will get flashed with a malicious binary, traffic sniffers will be installed, people will spy on you using your webcam, your bank accounts will be emptied, life as you know it will come to a screeching halt, etc. etc. etc.'''

	=Telnet Commands=		=Telnet Commands=

2017-08-12T21:10:52Z

Telnet

← Older revision		Revision as of 21:10, 12 August 2017
Line 31:		Line 31:

	Telnet access:		Telnet access:
	* Log in		* Log in to the router through the admin page
	* Advanced setup		* Advanced setup
	* Remote console		* Remote console
	* Enable telnet from WAN or LAN		* Enable telnet from WAN or LAN

	NOTE: When you turn on telnet, it turns it on from BOTH sides - internal and external. Don't leave it on or your telnet server could get hammered in a brute-force attack.		'''NOTE: THIS IS <u>REALLY REALLY FREAKING IMPORTANT</u>: When you turn on telnet, it turns it on from BOTH sides - internal and external. Don't leave it on or your telnet server could get hammered in a brute-force attack.'''

	=Telnet Commands=		=Telnet Commands=

2017-08-12T21:05:11Z

← Older revision		Revision as of 21:05, 12 August 2017
Line 3:		Line 3:

	Firmware download:		Firmware download:
	* ~~https~~:~~//charlesreid1.com/centurylink/~~CTQ002-4.12.1.71.bin		* [[File:CTQ002-4.12.1.71.bin]]
	* ~~https~~:~~//charlesreid1.com/centurylink/~~CTQ003-4.12.1.78.bin		* [[File:CTQ003-4.12.1.78.bin]]

	Datasheet: http://internethelp.centurylink.com/internethelp/pdf/modems/datasheet-c2100t.pdf		Datasheet: http://internethelp.centurylink.com/internethelp/pdf/modems/datasheet-c2100t.pdf

2016-09-03T12:20:08Z

Links

← Older revision		Revision as of 12:20, 3 September 2016
Line 20:		Line 20:
	* Boils down to an nmap command to look for open port 80 on a huge block of IP addresses		* Boils down to an nmap command to look for open port 80 on a huge block of IP addresses

			<pre>
	Linux:		Linux:
			$ nmap -sS -sV -vv -n -Pn -T5 1A.B.C.D -p80 -oG -
	~~<pre>~~
	nmap -sS -sV -vv -n -Pn -T5 1A.B.C.D -p80 -oG -
	~~</pre>~~

	Mac:		Mac:
			$ nmap -sS -sV -vv -n -Pn -T5 A.B.C.D -p80 -oG -
	~~<pre>~~
	nmap -sS -sV -vv -n -Pn -T5 A.B.C.D -p80 -oG -
	</pre>		</pre>

2016-09-03T12:19:37Z

Links

← Older revision		Revision as of 12:19, 3 September 2016
Line 14:		Line 14:
	This kind of explains the port 1050 thing (Java or OTG file share). Keyword was "Corba" management: https://docs.oracle.com/cd/E17984_01/doc.898/e14696/java_connector.htm		This kind of explains the port 1050 thing (Java or OTG file share). Keyword was "Corba" management: https://docs.oracle.com/cd/E17984_01/doc.898/e14696/java_connector.htm

	ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc		Chipset: BCM963268 Broadband Router

			Attack vector:
			* Possible ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc
			* Boils down to an nmap command to look for open port 80 on a huge block of IP addresses

			Linux:

			<pre>
			nmap -sS -sV -vv -n -Pn -T5 1A.B.C.D -p80 -oG -
			</pre>

	~~Chipset~~: ~~BCM963268 Broadband Router~~		Mac:

			<pre>
			nmap -sS -sV -vv -n -Pn -T5 A.B.C.D -p80 -oG -
			</pre>

	=Telnet=		=Telnet=

2016-09-03T11:30:46Z

Links

← Older revision		Revision as of 11:30, 3 September 2016
Line 11:		Line 11:

	DSLReports forums: https://www.dslreports.com/forum/centurylink		DSLReports forums: https://www.dslreports.com/forum/centurylink

			This kind of explains the port 1050 thing (Java or OTG file share). Keyword was "Corba" management: https://docs.oracle.com/cd/E17984_01/doc.898/e14696/java_connector.htm

	ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc		ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc

2016-09-03T11:00:40Z

nmap scan

← Older revision		Revision as of 11:00, 3 September 2016
Line 1,951:		Line 1,951:
	=nmap scan=		=nmap scan=

			<pre>
	$ nmap -A 97.113.9.219		$ nmap -A 97.113.9.219

	~~<pre>~~
	Starting Nmap 6.47 ( http://nmap.org ) at 2016-09-03 03:37 PDT		Starting Nmap 6.47 ( http://nmap.org ) at 2016-09-03 03:37 PDT
	Nmap scan report for 97-113-9-219.tukw.qwest.net (397.113.19.219)		Nmap scan report for 97-113-9-219.tukw.qwest.net (397.113.19.219)
Line 1,976:		Line 1,976:
	Nmap done: 1 IP address (1 host up) scanned in 169.43 seconds		Nmap done: 1 IP address (1 host up) scanned in 169.43 seconds
	</pre>		</pre>



	[[Category:Wireless]]		[[Category:Wireless]]

2016-09-03T10:51:14Z

@@ Line 1,947: / Line 1,947: @@
    red or amber.  They could be either on, off or blinkiing
    when either 'led allamber' or 'led allred' command is given
 </pre>
 [[Category:Wireless]]

2016-09-03T10:47:12Z

Telnet

← Older revision		Revision as of 10:47, 3 September 2016
Line 13:		Line 13:

	ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc		ADSL attack vector: http://bundlr.com/clips/5376055378cc8710a00003bc

			Chipset: BCM963268 Broadband Router

	=Telnet=		=Telnet=
Line 22:		Line 24:
	* Enable telnet from WAN or LAN		* Enable telnet from WAN or LAN

	When ~~logging in via~~ telnet, ~~I see this: BCM963268 Broadband Router~~		NOTE: When you turn on telnet, it turns it on from BOTH sides - internal and external. Don't leave it on or your telnet server could get hammered in a brute-force attack.

	=Telnet Commands=		=Telnet Commands=

2016-09-03T10:36:30Z

Voice

← Older revision		Revision as of 10:36, 3 September 2016
Line 95:		Line 95:
	* snoop_on/snoop_off - turns igmpv3 snooping on or off (this will assist with igmp traffic routing)		* snoop_on/snoop_off - turns igmpv3 snooping on or off (this will assist with igmp traffic routing)

	==~~Voice~~==		==voice==

	Here's the output for the voice command:		Here's the output for the voice command: