Hacker News Reader

Hacker News

Comment by lotsofcows | Hacker News Reader

Full thread

lotsofcows

Anyone played with this?

term1$ tcpdump -i en1 -X -n port 32764

term2$ telnet 192.168.0.1 32764

Output doesn't show the expected hex code. Is this naive?

View on HN

Yeah, I tried but with my external IP:

    $ telnet [redacted] 32764
    Trying [redacted]...
    telnet: connect to address [redacted]: Connection refused
    telnet: Unable to connect to remote host

Does this mean my router has no backdoor? Is it clever enough to avoid detection?

Are you running one of the affected hardware models?

No, but I have a fairly uncommon router (not ISP supplied) so I was curious if it also had a backdoor. It doesn't respond on LAN so it seems my DrayTek Vigor 2750N is backdoor-free for now...

That just means it's free of this particular backdoor.

Hence "for now...". A new backdoor could surface tomorrow.

Check your internal IP as well, some models are only vulnerable on the LAN.

Metasploit has a check module for this, and will also get you a shell:

https://community.rapid7.com/community/metasploit/blog/2014/...

Reply on news.ycombinator.com