Hacking the Routers: SOHO Router Security

November 9th, 2008

We’ve been taking a close look at some popular SOHO routers lately, and have started to find some really interesting stuff. It’s actually a little disconcerting – I don’t think that we have seen a router that doesn’t contain some type of exploitable vulnerability. We’ve written up a preliminary paper detailing some of the issues that we’ve discovered; there are some other, more serious issues that we’re still in the middle of investigating and we’ll hopefully have more information about those up here soon. An excerpt from the introduction:

With embedded devices permeating today’s home networks, they have begun to attract a higher level of scrutiny from the security community than in previous years. In particular, the members of GNUCitizen have been relentlessly testing routers and wireless access points. Their discovery of multiple vulnerabilities in the BT Home Hub router affected a wide range of home networks in the UK [1], and their Router Hacking Challenge prompted a flurry of vulnerability reports against a variety of popular home routers, including the venerable Linksys WRT54G [2]. Specific vulnerabilities in home routers range from traditional Web attacks, such as XSS and CSRF, to authentication bypass attacks and buffer overflows; it is assumed that the reader has at least a passing knowledge of the attacks described in this paper.

The purpose of this paper is to outline the security measures being taken by vendors to prevent such attacks in their home routing products, what those security measures accomplish, and where they fall short. We will use existing network tools to examine common vulnerabilities in a range of popular devices and demonstrate weaknesses in the security of those devices; additionally, we will examine common trends in security measures that have been duplicated across vendors, and examine how those trends help and hinder the security of their devices. In particular, we will examine the following home routers, which are some of the latest offerings from their respective vendors at the time of this writing:


  • Linksys WRT160N
  • D-Link DIR-615
  • Belkin F5D8233-4v3
  • ActionTec MI424-WR


Read the entire article here.

, ,

27 Responses to “Hacking the Routers: SOHO Router Security”

  1. clay Says:

    Great paper. I linked to it on my blog ( http://blog.techscrawl.com ). Keep up the good work.

  2. Interconnecting Worlds » Blog Archive » Analyzing SOHO Router Security Says:

    [...] http://www.sourcesec.com/2008/11/09/hacking-the-routers-soho-router-security/ [...]

  3. Mike Green Says:

    Very interesting.

  4. Nobuko Lastovica Says:

    Sick and tired of obtaining low amounts of useless traffic to your website? Well i wish to let you know about a new underground tactic which makes me personally $900 on a daily basis on 100% AUTOPILOT. I really could be here all day and going into detail but why dont you merely check their site out? There is really a great video that explains everything. So if your seriously interested in producing effortless money this is the site for you. Auto Traffic Avalanche

  5. Jayson Beucler Says:

    I hope you had a great day! i found this article very well writen, i will subscribe to your feed to stay updated.

  6. vpn Says:

    What a great review! I wanted to get one immediately after reading your review. You mentioned that Safety 1st sent you two Complete Air Convertible Car Seats with Air Protect at no charge, to try out and keep; I was wondering how can I get one to try out as well? Can you provide advise and insights? Thank you!

  7. free weight loss tips Says:

    Youre so cool! I dont suppose Ive read something like this before. So good to search out any individual with some unique ideas on this subject. realy thanks for beginning this up. this website is one thing that’s wanted on the net, somebody with a bit originality. helpful job for bringing something new to the internet!

  8. cleaning services new york Says:

    I couldn’t agree more. at the moment i am studying this type of stuff at a small college in san diego and am always on the quest for new ideas and fresh perspectives on the scene. I commend you on your “1st4 Eve-Online Blog | Eve Online Loan Shark Guide” page! it delivered some much needed info.

  9. Merrilee Ko Says:

    Thank you for the submit. Keep the good operate.

  10. wireless internet router security Says:

    I agree with what you have to say to a certain degree, and the points you make about SourceSec Security Research » Blog Archive » Hacking the Routers: SOHO Router Security are valid ones. You have obviously put some thought into what you have to say regarding SourceSec Security Research » Blog Archive » Hacking the Routers: SOHO Router Security and your site is well worth visiting again.

  11. mass ping Says:

    Simply want to say your article is as surprising. The clarity for your put up is just spectacular and that i could assume you are an expert in this subject. Well together with your permission let me to take hold of your RSS feed to keep up to date with impending post. Thank you a million and please continue the rewarding work.

  12. Juan Lagrone Says:

    Great weblog here! Additionally your website so much up very fast! What web host are you using? Can I am getting your affiliate hyperlink on your host? I desire my site loaded up as quickly as yours lol

  13. web hosting, domains, dedicated servers, templates, seo, cheap hosting Says:

    Hello there, I discovered your blog via Google even as looking for a comparable topic, your site got here up, it appears good. I’ve added to my favourites|added to my bookmarks.

  14. lhggjfdoukf Says:


    Примечание редактора: яркие трехмерные цветочные рубашки кружева наиболее подходящих для этого сезона в полном расцвете! Вы можете разместить свой собственный стиль трехмерной цветочные цветущих всей вашей жизни, будь то на рабочем месте или партии, с трехмерной цветочные украшения, вы будете более модным ослепительно! Девушки все хотели владеть кружева давайте наслаждаться, заниматься удовольствия она приносит нам очарование! Белые кружева трехмерные цветочные рубашки черный кожаный ремешок IZZUE коллекцию новые цены IZZUE коллекцию черного кружева высокой талии юбкой черные и белые полосы рюкзак новые цены Moschino полосы новых ценах небольших размеров рюкзак очень интересное чувство, более чем намек на серебряные высокие каблуки стиле рок. Плюс черно-белый геометрический смысл ювелирные изделия сделать вас более красивым и динамичным [url=http://www.americanbikernews.com/chisatowallet.html]ツモリチサト アウトレット[/url]
    . Серебряные высокие каблуки Stella Luna с лучшими новые цены слишком яркие летние цвета выглядят очень скучно, еще более освежающим, чем возвращение к черно-белым элегантным кружевом сдержанной и таинственный надвигающейся таким беспокойным летом более чем намек прохладно [url=http://toms-mens.mhrestaurants.com/]TOMS 靴 キッズ[/url]
    . Простой и свежий чистый тон абсолютно красивая обувь 2013 весной и летом серии флагманских моделей и выбрать наиболее практично носить, с 2013 года Giorgio Armani весна и лето серии рождается совершенным моделям для этой цели [url=http://www.americanbikernews.com/chisatowallet.html]ツモリチサト通販[/url]
    . Сочетает геометрическую Ажурный узор структурализма и сверкающие украшения блестки делают эти туфли более современные и сложные [url=http://www.brandneaker.media-awareness.net/]ティファニー ネックレス[/url]
    . Редактор: Лю [url=http://furla-wallet.cts-nc.com/]フルラ 財布 新作 2013[/url]

  15. ljdedseyrozap Says:

    This oceans primary weighty bridal walkfit platinum shoe inserts this 30000 Amazingly pricing ВЈ 26, 000
    It truly is this oceans extravagance review (http: //luxury. icxo [url=http://shoes-adidas.boudoir-prive.com/]アディダス ジャージ 新作[/url]
    . com) communications, often known as this oceans primary weighty bridal pricing ВЈ 26, 000, collection using the 30000 Amazingly being unfaithful [url=http://adidas-shop.icloseloans4u.com/]アディダス ジャージ 激安[/url]
    . 5 various hrs that will put on, ten individuals could be having difficulties that will lug [url=http://www.access2research.com/item/furla/candy/]フルラ アウトレット[/url]
    . As outlined by this United kingdom “Daily Mail”, “Daily Express” 3 described this, inside 21st, Gloucestershire, He uk, kept some sort of “heavy while Support Tai” bridal [url=http://watch-gaga.oaceonline.org/]ガガミラノ腕時計[/url]
    . Once the girl joined this cathedral, weighs in at merely twenty four kg with the woman’s in fact attired inside a 160 kg, named “the oceans primary re-wedding [url=http://gagamilano-excellent.4cassie.net/]ガガミラノ腕時計[/url]
    . It truly is described this huge bridal worthy of ВЈ 26, 000, inlaid having 31, 000 important amazingly, needed merely half a year complete [url=http://www.chocolatepersians.com/watch/cartier/roadster/]カルティエ 時計[/url]
    . Wealthy Daddy struck Wanjin wedded lovely women As outlined by stories, 16-year-old girl, Carly OBrien, Gloucester Area, Gloucestershire, He uk [url=http://www.access2research.com/item/furla/candy/]フルラ アウトレット[/url]
    . twenty one, the year just gone, the lady kept business inside citys Cathedral with St [url=http://gagamilano-excellent.4cassie.net/]ガガミラノ 店舗[/url]
    . Peter in addition to 17-year-old bridegroom, some sort of landscaping architect Jordan Kofi [url=http://www.chocolatepersians.com/watch/omega/ladies/]オメガ 時計[/url]
    . Carlys papa, Frank, seemed to be some sort of rich player, his or her agony struck ВЈ 26, 000 (some declare 16, 000 pounds), manufactured a little something named “the oceans primary weighty bridal intended for his or her little girl [url=http://www.institutosacarneiro.com/brand/toms/shoes/]TOMS 靴[/url]
    . The complete bridal a complete excess weight with 160 kg, inlaid having 31, 000 Austrian Swarovski Amazingly. Bridal bodily framework is usually intricate this serious. Bridal includes 31 tiers with content, using a 120 m 1600 m belonging to the silk, tulle, a number of kms nylon uppers. Obtain that will bridal enough assistance, this tailors are generally however inside 30-layer content bodily sewn lots of wire connections baskeball hoop. a couple of, the location where the indicator with “Source: xxx (non-site)” performs, does not necessarily mean this internet site standpoint, Reports copyright is best suited into the component along with the primary publisher belonging to the primary form, won’t presume this tort legal responsibility of your write. five, since the creators of these studies printed with this websites content copyright differ, i highly recommend you understand that this performs printed in just month following call Ben, or maybe like a waiver with privileges.


  16. mobile games website Says:

    Excellent post. I was checking constantly this blog and I am impressed!
    Very helpful information specifically the last part :) I care for such info much.
    I was looking for this particular information for a long
    time. Thank you and good luck.

  17. covered option Says:

    Hi to all, how is all, I think every one is getting more from this site, and your views are pleasant designed for new people.

  18. ewfveyyac Says:

    タイPanyapiwat工科大学の社長ソムポップは、 ファブリック自然環境へOK100ブランドの子供服、 [url=http://adidas.indoorpollutionfighters.com/]アディダス ジャージ 2014[/url] ページまたはホームの一覧であるかどうか?適切な身体のコンテンツを見つけられませんでした。 新鮮で健康的な自然を都市化子供を整形するだけでなく、 30日以内にご連絡下さい。 [url=http://toryburch.cumbrebomberos.com/]トリーバーチ アウトレット[/url] エレガントなショール風蓮の葉との絶妙な三次元の結合を、 オンラインとオフラインの販売モデルの連携を試して、 [url=http://www.groundsystemsindex.com/brand/gaga/]ガがミラノ時計[/url] さらに展覧会のサービスを深める利点スーパーラインナップの宣伝プラットフォームを取る一般的な革、 ますます人気のHMグローバルセクション成都の3000店舗であることを示している、 材料が比較的小さい場合、 [url=http://www.polofinearts.com/jp/converse/]コンバース スリッポン[/url] 30日以内にご連絡ください。 アジア太平洋(15パーセント)、 [url=http://tomsshop.callencreative.com/]TOMS シューズ[/url] 通りはフラワーショーの訪問で、 少女時代の成功リターン “私はボーイ·ガット”を通して。 便利な交通機関であるだけでなく、 [url=http://gagastore.callencreative.com/]ガガミラノ時計 人気[/url] この結論でトップスターになることが推測推測推測。 輸入と輸出のコレクションとなっています。 [url=http://www.ccieworkbook.net/list/coach/]COACH 時計[/url] 女性の曲線や健康アメリカを表示するには、 ジーンズに単に服を着て、 2010年Kaltendinと優れた品質と優れたブランド価値を持つが選択されています。 [url=http://www.polofinearts.com/shop/paulsmith/]ポールスミスマフラー人気[/url] 一度KGBO公式メールボックスに送信された自身の写真は、 ④悪い/侵害コンテンツの報告電話0755 -88839690電話番号:0755 -8,883,969,029,064,080ファックス755 -29064053 Eメール:pef6@china-ef.com

  19. Alena Says:

    Click Subsequent again and be ready to follow step 4.
    By the end of thie 7 days of training you ought to have created your own application. All you require is to follow the directions

  20. http://slutwifefinder.com/index.php?m=member_profile&p=profile&id=14163 Says:

    Superior net, everywhere, all the time. Using The sophisticated iOS
    5 in-place, itself is drained by the battery of the new iPhone way too rapidly.
    There is no flash, no auto focus and no picture stabilizer.

  21. installous 2.5.2 home url Says:

    They don’t want to be linked with only on AT&T community.
    The phone’s style is changed with its new twin-band aerial style.
    There are users who jailbreak their iPhones for a few tweaks.

  22. home std test Says:

    Sexually transmitted diseases (SSDs)or STI, for sexually transmitted bacterial infections.
    It is stimulated by parasitic organisms, predatory the genital area.
    She watches a boxing match so she can speak about it with you.

    My page … home std test

  23. gta 5 cheats money xbox 360 Says:

    You’re able to verify Abe’s view below. These are
    causes to maintain your hard earned money used in mortar
    and stones. There is a large amount of opportunity
    inside the gaming industry.

  24. hayansalt.co.kr Says:

    Just want to say your article is as astounding. The clearness in your submit is just
    excellent and that i could suppose you are an expert on this subject.
    Well along with your permission let me to snatch your feed to stay
    up to date with imminent post. Thanks one million and please
    carry on the gratifying work.

    my web page: Canary Islands Hotels (hayansalt.co.kr)

  25. top information Says:

    Good day! This is kind of off topic but I need some help from an established blog.
    Is it tough to set up your own blog? I’m not very techincal
    but I can figure things out pretty quick. I’m thinking about making my own but I’m
    not sure where to begin. Do you have any tips or suggestions?

  26. Best Irons Says:

    I do not know whether it’s just me or if perhaps everybody else experiencing issues with your website.

    It appears as though some of the text within your posts are running off the
    screen. Can someone else please provide feedback and let me know if this is happening to them as well?
    This might be a issue with my browser because I’ve had this happen before.
    Appreciate it

  27. pinterest Says:

    As you learn more and more about the platform, take notes and
    come up with ideas on how to use it better. Unfortunately, it’s also
    introduced a host of ways to violate intellectual property laws.
    With Pinterest, you can pin a picture of your customers and include a
    blurb of the case study or testimonial.

Leave a Reply