When I got home, I bought an Alibaba router that was ready to replace the old friend at home and wanted to look into the background to see the broadband account password. ? ? What is the back-end password? ? ?
I was smitten. The routers in my home are usually pppoe dial-up. After the router negotiates the authentication method with LPP and the pppoe authentication server, it is very likely to transmit the broadband account and password in the clear. Then we can build the pppoe authentication server locally and Router wan port connected to the local network card, wiredhark capture broadband account password? Say dry.
How pppoe worksThe work flow of PPPoE protocol includes two phases of discovery and session. The discovery phase is stateless. The purpose is to obtain the Ethernet MAC address of the PPPoE terminator (on the central office ADSL device) and establish a unique PPPoE SESSION-ID. After the discovery phase is over, it enters the standard PPP session phase.
When a host wants to start a PPPoE session, it must first perform the discovery phase to identify the local office's Ethernet MAC address and establish a PPPoE SESSION-ID. In the discovery phase, based on the network topology, the host can discover multiple access concentrators and then allow the user to select one. When the discovery phase completes successfully, both the host and the selected access concentrator have the information that they establish a PPP connection over Ethernet. Until the PPP session is established, the discovery phase remains in the stateless Client/Server mode. Once the PPP session is established, both the host and access concentrator must allocate resources for the PPP virtual interface.
The two parties in the conversation authenticate using the LCP-negotiated authentication method. If the authentication succeeds, the network-layer IPCP negotiation can be performed. The authentication process is performed after the link negotiation LCP ends. At this point you can grab the broadband account password.
Router OS builds pppoe authentication server
Use RouterOS to implement the function of the PPPOE server. Download the ios image to install on the VMware virtual machine.
Of course, you can also use Ubuntu or windows to build.
Vmware configurationThe most critical step in the installation process: The network connection mode is changed to bridging mode.
Because we use the router wan port to connect the computer limited network card, so the virtual network editor to set up a bridged network card as a wired network card.
Start the virtual machine, install the pppoe server, and select the system and ppp options. After selecting, press i to enter the installation process. After the options are selected y.
After the restart, the account admin password is blank and login to the system.
Perform the following instructions to complete the configuration of the PPPOE server
/interface pppoe-server server add interface=ether1 service-name=Fake-PPPoE-Server authenTIcaTIon=pap
/interface pppoe-server server enable 0
Use wireshark to listen to the local connection, insert the WAN port cable of the dial-up router into the network port of the computer, disconnect the routing power, re-plug the power, wireshark will capture the entire PPPOE authentication process, find the AuthenTIcate-Request in the PPP PAP protocol. Is the broadband account password, clear text transmission.
Iget Vape,Disposable Vape Iget Dual,Iget Dual Vape,Iget Xxl Disposable Vape Device
Nanning Nuoxin Technology Co., LTD , https://www.nx-vapes.com