Cable Forum - View Single Post

HackedComputer · 18-04-2016, 15:05

I have never, ever.. dealt with such a poor Modem/Router in all my life until I received the Hub 3.0.

The majority of issues are indeed to do with the Firmware, but certainly should not have been released to the public - especially new connectees.

What concerns me more, is the security of this thing and the way it communicates the (weak by design policy) password that is set back to VM to be stored in their unsecured non-hashed database; for which I started a thread on their main community forum. Even more of a joke when the entry of the password isn't even starred. Secondly, I don't even want the credential to be even stored on their end to facilitate this useless password reset procedure. How hard can it be to instruct users to hold the reset button using a paperclip?

Basic networking functionality isn't even present, such as changing the LAN IP Range. I figured I could possibly bypass this restriction by loading up BurpSuite and inject arbitrary code - only to find this router relies on SNMP to make adjustments. Perhaps I'll have an attempt at cracking the SNMP Strings. The possibility to enable or disable Ping from the WAN is also missing

Lastly, the interface - I'm sure you are all aware is pathetic and you'd think they'd sort the resource loading before shipping these things out to non-trial users first.

Funnily enough, it's possible to get another ISP's animated configuration wizard with using some trickery within Firefox.

Asus RT68U is now on order. It's dreadful enough having to use the Superhub 3.0 in MODEM mode.

18-04-2016, 15:05	#1
HackedComputer Inactive Join Date: Apr 2016 Services: Virgin VIVID 200 Posts: 4	Hub 3.0 I have never, ever.. dealt with such a poor Modem/Router in all my life until I received the Hub 3.0. The majority of issues are indeed to do with the Firmware, but certainly should not have been released to the public - especially new connectees. What concerns me more, is the security of this thing and the way it communicates the (weak by design policy) password that is set back to VM to be stored in their unsecured non-hashed database; for which I started a thread on their main community forum. Even more of a joke when the entry of the password isn't even starred. Secondly, I don't even want the credential to be even stored on their end to facilitate this useless password reset procedure. How hard can it be to instruct users to hold the reset button using a paperclip? Basic networking functionality isn't even present, such as changing the LAN IP Range. I figured I could possibly bypass this restriction by loading up BurpSuite and inject arbitrary code - only to find this router relies on SNMP to make adjustments. Perhaps I'll have an attempt at cracking the SNMP Strings. The possibility to enable or disable Ping from the WAN is also missing Lastly, the interface - I'm sure you are all aware is pathetic and you'd think they'd sort the resource loading before shipping these things out to non-trial users first. Funnily enough, it's possible to get another ISP's animated configuration wizard with using some trickery within Firefox. Asus RT68U is now on order. It's dreadful enough having to use the Superhub 3.0 in MODEM mode.