Re: Hijack IP Address using cable modem

From: russi (rusko5at_private)
Date: Mon Apr 30 2001 - 01:44:58 PDT

  • Next message: russi: "Re: Hijack IP Address using cable modem" 

    i use a com21 doxport 1010 at home. www.com21.com provides a lot of
extremely helpful information. in the service and support section of their
website they provide a sample .cm configuration file, a breakdown of
different settings in it and instructions on how to get it uploaded to your
modem by setting snmp fields. they also have a firmware .bin (anyone know of
a resource for bridgeport chip assembly/machine code?) with similar
instructions.


----- Original Message -----
From: "Marcin Dawcewicz" <mivat_private>
To: <VULN-DEVat_private>
Sent: Monday, April 30, 2001 12:40 PM
Subject: Re: [VULN-DEV] Hijack IP Address using cable modem


> > > ----- Original Message -----
> > > From: "fejed" <fejedat_private>
> > > To: <VULN-DEVat_private>
> > > Sent: Friday, April 27, 2001 2:08 AM
> > > Subject: Re: Hijack IP Address using cable modem (fwd)
> > >
> > >
> > > > from what I've seen, my configuration file is delivered via bootp, I
> > have
> > > a
> > > > surfboard sb3100 cable modem, if anyone wishes to see a dump of the
> > > > configuration, email me off list
> >
> > how do you manage to get the config file?
>
> I've contacted fejed some time ago. He just sniffed on his LAN and what he
> wrote about is simply DHCP/BOOTP packet catched in the wild (they're sent
> to 255.255.255.255). If you wanna get CM configuration file you have to
> go one step further. Acquire similar packet from your network, take a look
> at it, find TFTP server address and filename and just grab this file from
> TFTP server.

doesn't the cable modem just send the packet out of the coax interface?

pavel

    This archive was generated by hypermail 2b30 : Tue May 01 2001 - 21:11:20 PDT