Guest access to router. Stuck now.

[Erra]

Obviously a new player.
I can get guest access to the router, but that's it. Trying any FTP or HTTP exploits on any of the open ports listed in NMAP doesn't work. All my exploits seem to require a root user be present somewhere. and they aren't.

on another mission i've had to give up for now, more of the same. Only with SSH as well. Can't get passed the router.

I can get admin names from whois. but i don't see the point. because I don't know any of the users.

[astrosteve]

I did the same thing when I started playing. As best I can tell, you don't even need to do anything with the router most the time. You want to be on a computer if it's for a mission, which I'm guessing it is. You can upload whatever you want to a guest account, so use ScanLan to look for a computer and try to get into it. Hopefully, there's an exploit that'll get you a user shell or an email server where you can get info and send out phishing emails with it. If you want to learn to make exploit scripts and start scanning things yourself, there seems to almost always be a shell exploit that isn't for sale in the shop.

I've been told you can trigger an admin to login as root by sending an email to them, but I've never managed to make that happen, so I'm not sure if that's wrong or if I'm just doing something wrong.

[TPL.paden89]

to hack router, you need to use router exploit for /etc/passwd. by default you will get denied when you enter a LAN IP number. but be creative and play around with the IP.
for example,

if a known LAN IP is: 192.168.1.2,

try key in :192.168.1.X (X is any number to try)

you may get lucky and get root password. After that, up to you how to go deeper.

[Erra]

Originally posted by astrosteve:

I did the same thing when I started playing. As best I can tell, you don't even need to do anything with the router most the time. You want to be on a computer if it's for a mission, which I'm guessing it is. You can upload whatever you want to a guest account, so use ScanLan to look for a computer and try to get into it. Hopefully, there's an exploit that'll get you a user shell or an email server where you can get info and send out phishing emails with it. If you want to learn to make exploit scripts and start scanning things yourself, there seems to almost always be a shell exploit that isn't for sale in the shop.

I've been told you can trigger an admin to login as root by sending an email to them, but I've never managed to make that happen, so I'm not sure if that's wrong or if I'm just doing something wrong.

Yea, problem is the mission starts you with the IP of the router. I now need to get on to a computer. I can't use ScanLan because there's no way to upload files like that to a router (unless i'm missing something).

Originally posted by paden89:

to hack router, you need to use router exploit for /etc/passwd. by default you will get denied when you enter a LAN IP number. but be creative and play around with the IP.
for example,

if a known LAN IP is: 192.168.1.2,

try key in :192.168.1.X (X is any number to try)

you may get lucky and get root password. After that, up to you how to go deeper.

Yeah. been trying that too. Just no luck so far.

[jester]

Yeah same. I cannot progress beyond a router. Thought I could scp but every time I've tried it tells me "not found". The path to whatever I'm trying to upload is most definitely correct. So I'm not sure.

[TPL.paden89]

Originally posted by jester:

Yeah same. I cannot progress beyond a router. Thought I could scp but every time I've tried it tells me "not found". The path to whatever I'm trying to upload is most definitely correct. So I'm not sure.

Try uploading NMAP & ScanLan once you get guest access on a router. use scp -u /bin/nmap