<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
Missed this yesterday. Good on them for taking the risk of
publishing the findings.<br>
<br>
Insecure embedded devices is a huge issue but surprisingly doesn't
seem to get exploited in the wild as broadly as you'd expect. As
those guys note, there are certainly a few botnets kicking around,
but you don't tend to see widespread crimeware running on those
devices.<br>
<br>
Having telnet enabled is generally a free money indicator and loads
of devices have default admin creds. Running something like `nmap
-sS -sV -iR 1000000 -p23` is a quick and dirty way to get some idea
of how many are around.<br>
<br>
You can get more accurate with it by pulling a prefix list for
$Country, running a mass whois over the list then targeting those
networks identified as ISPs. Those networks tend to have
hundreds/thousands of routers connected. By passing the nmap output
to something like netcrack with a really simple admin/admin,
admin/password type list you can pwn many thousands of devices in a
couple of hours.<br>
<br>
Someone I, uhhh, knew once... on the internet... a long time ago...
anonymously... hacked together a couple of simple scripts to
automate the whole process so they could yield a bunch of devices
quickly (the ranges most flush with vulnerable routers tend to be
dynamic so you have to re-scan to keep a list current) to use for
various things.<br>
<br>
There's also version of nmap that'll compile for BusyBox kicking
around somewhere, which is what I assume they're talking about in
the report...<br>
<br>
<br>
<br>
T.<br>
<br>
<br>
<div class="moz-cite-prefix">On 20/03/13 4:18 PM, Nick @ Deltaband
wrote:<br>
</div>
<blockquote
cite="mid:CAPL9D-D5O1hxRq32fmvSOYbT6DVEDwnZY0M1ccKP4qtik46UCw@mail.gmail.com"
type="cite">
<div>Pretty impressive <a moz-do-not-send="true"
href="http://internetcensus2012.bitbucket.org/paper.html"
target="_blank">http://internetcensus2012.bitbucket.org/paper.html</a></div>
<div><br>
</div>
<div>N</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>