Home » 

UK ISP News Archives

 » 
Sponsored Links

GNUCitizen Breaks BT Home Hub 6.2.6.E Security

Posted: 28th May, 2008 By: MarkJ
The "ethical" hacking website, GNUCitizen, has found a new way around improvements to the security of BT’s 'Home Hub' broadband ADSL routers (firmware 6.2.6.E). It's understood that the operator had changed the default admin password from 'admin' to the serial number of the router itself, though this too may now be at risk:

As you can see, changing the default admin password to a value which is specific to each Home Hub would make password guessing/cracking attacks much harder. At least, this is usually the case. Well, it turns out that you can get the serial number of the Home Hub by simply sending a Multi Directory Access Protocol (MDAP) multicast request in the network where BT Home Hub is located.

Yes, you must already be part of the LAN where the Home Hub is present, either via Ethernet or via Wi-Fi. However, at GNUCITIZEN, we have demonstrated trivial ways to predict the WEP encryption key of the Home Hub if you know what you are doing. In summary, there are two ways to break into a BT Home Hub Wi-Fi network:

  • arp replays injection plus weak IVs cracking. This attack is typically launched using airodump-ng + aireplay-ng + aircrack-ng (I highly recommend using Backtrack 2 plus the Alfa USB AWUS036S Wi-Fi adaptor for this attack)

  • Predict the Home Hub’s default WEP key by bruteforcing a list of potential candidates which are derived from the SSID (the SSID can be obtained by anyone of course)

Paul Vlissidis, a technical director for I.T. consultancy NCC Group, has already criticised the security of BT's Home Hub in Mondays news (here).
Search ISP News
Search ISP Listings
Search ISP Reviews
Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
132Mbps
Gift: None
Sky Broadband UK ISP Logo
100Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £27.99
145Mbps
Gift: None
Zen Internet UK ISP Logo
Zen Internet £28.00 - 35.00
100Mbps
Gift: None
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
BeFibre UK ISP Logo
BeFibre £19.00
150Mbps
Gift: None
YouFibre UK ISP Logo
YouFibre £19.99
150Mbps
Gift: None
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Large Availability | View All
Sponsored Links
The Top 15 Category Tags
  1. FTTP (5594)
  2. BT (3536)
  3. Politics (2558)
  4. Openreach (2315)
  5. Business (2289)
  6. Building Digital UK (2256)
  7. FTTC (2050)
  8. Mobile Broadband (1998)
  9. Statistics (1804)
  10. 4G (1686)
  11. Virgin Media (1644)
  12. Ofcom Regulation (1477)
  13. Fibre Optic (1410)
  14. Wireless Internet (1403)
  15. FTTH (1382)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules