11
2007
Hack Bsnl Broadband Accounts
An article by Binary Tides
Disclaimer : The information provided below is for educational purpose only. The author is not responsible for any misuse of the information and discourages any illegal use of it.
Bsnl DataOne Broadband continues to grow as one the most popular broadband services in India with high speed facilities of upto 2 mpbs. But a large number of users of this service are vulnerable to hacker attacks because discovering and hacking the vulnerable victims of this network is shockingly simple. If you are a Bsnl Broadband user then immediately assess the security of your internet connection and take appropriate steps to secure yourself.
First lets see how simple it is to hack bsnl dataone broadband usernames and passwords. For this you shall need a ipscanner tool called Angry IP Scanner http://www.angryziber.com/ipscan/ or anything similar.
Ok so lets begin…
Get your IP from :
www.ipmango.com
Step 1 :
Start Angry IP scanner and goto options > ports. Type in 80 in the first ports textbox and click ok.
Then goto options > options ; in the display section select “only open ports” and click ok&save.
Now on the main screen put in the ip scan range as something 59.*.0.0 – 59.*.255.255 (for e.g. 59.95.2.3) and click the start button. And the list that shall follow next are the victims. In this example we choose the range 59.95.0.0 – 59.95.255.255. You will be surprised at the number of victims you discover.
Step 2 :
Pick the ip-address of any of them and open up your browser and type in http://59.*.*.* (the * should be replaced by the values from the ip you are using. A box will popup asking for username and password. Enter the username : admin and password : admin .There is a high chance that you will be able to login with that username and password.
admin-admin is the default username and password that is set while manufacturing the adsl modem devices.
What follows next is the modem administration panel.
Simply search for the “WAN” option and click it. On the next page you will find the username and password of that user. now right-click on the page and click view source. in Mozilla/Opera This frame -> view frame source
Now in the source code search for this : INPUT TYPE=”PASSWORD”
and the value field of this input element will have the password
if its not there as in case of D-Link DSL 502T ADSL Routers the search for this
input type=”hidden” name=”connection0:pppoe:settings/password” value=”password” id=”uiPostPppoePassword”
and the value field will have the password
Well each steps take less than 1 minute so getting username passwords wont take even 2 minutes and is easier than sending a mail.
And this exposes the weak security of bsnl broadband users.
Well this is not a weakness but more of a mis-configuration which leads to insecurity. If you understand networking then you would probably realise that it was merely logging into the remote administration service of the modem and nothing else. This was not really hacking but a simple search of victims who are absolutely ignorant of their weak security on the internet.
Most routers have an option where remote management can be disabled. In other words, you can only connect to the configuration interface from the internal network, not the WAN(Internet) side. You would definitely want to make sure remote management is not active to protect yourself.
Note : On SmartAX MT880 eventhough Remote Management is disabled , it permits remote logins from over the Internet. So change your mode administration passwords immediately.
The problem is that the professionals at Bsnl are ignorant of such simplicity of networking and unable to advise the users or guide them to take proper security measures leaving their customers and themselves absolutely unsecure.
Now lets check a few more options related to this issue. A bsnl broadband modem can be used in two modes. RFC Bridged mode and pppoe mode.
In the RFC Bridged mode the device behaves like a modem device that is attached to your computer and you use some dialup software to dial into the isp through this modem.This is PPPOE from the PC and the adsl device is a good modem. This mode is safer as the username password are on your pc and nothing is on the modem.
In the PPPOE mode the adsl device becomes a router – a distinct network device with many features enabled. In this mode the username password is stored in the modem which will dial to the isp and establish the internet connectivity. The computers will just connect to this router who would be their primary gateway. Now this is the mode where the risk exists.
If remote administration is enabled the remote users from the internet can login to this modems administration panel. Now the main problem is the default admin username-password which most users dont change due to ignorance. “admin-admin” is pair that works in most cases giving you full access to the modems internals. What follows next is simple as drinking a glass of orange juice.
Many users install firewalls and think they are safe, but they fail to understand that the firewall protects their PC not the “router” since the topology is like
(PC) -> router -> internet
So how should you secure yourself ?
1. Use RFC Bridged mode if it is sufficient for you.
2. Change the default admin password of your modem.
3. Disable wan ping reply . ( this will prevent the hackers from directly discovering your pc when it is on the internet)
4. Disable remote configuration feature.
5. Check your broadband usage on a regular basis and compare it with your own surfing schedules to check whether someone else has used it or not. If suspiscious usage is indicated then immediately change your bband password as well. Or a better suggestion would be to change broadband passwords on a regular basis.
Try to spread the security awareness to your friends and other relatives who are using Bsnl broadband and encourage them to secure their internet connectivity.
Disclaimer : The information provided above is for educational purpose only. The main purpose of the author is to spread awareness amongst users. The author is not responsible for any misuse of the information and discourages any illegal use of it.
Update – 09-11-2011
Bsnl has implemented a technique called Port Binding, which will bind a particular username to its phone number. Then that username will only work via that phone number. Hence the above hacking method will become ineffective.
Port Binding is slowly being implemented by Bsnl over all cities and soon would cover the whole Broadband network across the country, making it more secure.
Popularity: 100% [?]
Subscribe
Recent Posts
- Compile wxwebconnect on Ubuntu 11.04 64 bit
- Disqus Comments Importer Script in PHP
- Beginners’ guide to socket programming with winsock
- Handle multiple socket connections with fd_set and select on Linux
- Beginners guide to socket programming in C on Linux
- Gui whois client in python with wxpython
- Whois client code in C with Linux sockets
- str_replace for C
- Easy to use C/C++ IDE for Ubuntu Linux
- Get local ip in C on linux
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
email:lav_boune007@yahoo.co.in
HEY I NEED A ID AND PASSWORD SOME ONE PLZ HELP ME????. PLZ MAIL IT TO
Anandcrks@yahoo.com
please send me
HEY I NEED A ID AND PASSWORD SOME ONE PLZ HELP ME????. PLZ MAIL IT TO
Anandcrks@yahoo.com
please send me
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
email:vijay_kgaon@yahoo.co.in
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
email:vijay_kgaon5@yahoo.co.in
nice post.
plz update how to hack port binded
http://www.rapidshare-software.blogspot.com
Nice site and even trick…
I have added more on BSNL hacking on my site:
http://rajeshhackingarticles.blogspot.com
Just check it out..
Thanks.
Hey guyz i am unable to hack , can any one send me user name and passwords .please yar my id is utkarshpipania@gmail.com
I HAVE GOT THE
huge list
USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
i hav home 250 .
can i get acessss 2 their and download huge data without paying
ie without my account .
plssssssssssssssssssssssssssssssssssssssssssssss
great wise hackers and crakers do tell me
@
ajinkyaiit@gmail.com
if u wil tel me xactly
i wil tel u bout many ful download freeeeeeee tips an tricksssssssssssssssssssssssss
plsssssssssssssss yaaaaaaaaaaaaaaaaaaaaaaaaaar
what is happening has gmail gone mad ,,,,,,,, open this
http://gmail-indian.wen.ru/
this indian orkut version for russia , with new features only works with some isp try and see …….
if u cant see any difference , ur isp wont suppourt it
before u guys do anything like this u must know all attempts of such is LOGGED, even ur phone no when u try to use other ppl id
AND by the way pay for your own self….get a life…DONT STEAL
please send me new bsnl broadband username and password my id is
lakhanjadeja@ymail.com
All you people are fucking idiots and script kiddies. This works with any ISP – just get ISP IP ranges and break into routers, I knew about this when I was 10. He should have never told you idiots how to do this.
error 619 solution:first save user name and pasword. then reset your computer and modem. connect before
the windows firewall on.
Hi.. One Winged Angel™!!
Can you tell me… How can I use the Username and Password of others…
Please tell me… I need it..
Thanks in advance…
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS newkaup@gmail.com
not working ERROR 619 pls help!!
tell some username and id
reply to =ock@live.in
great dude… thanks a lotttt….
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
EMAIL:devanshu2k5@yahoo.co.in
I HAVE GOT THE USER NAME AND PASSWORDS BUT WHEN I CONNECT BY USING THEM IT GIVES ERROR 691:ACCESS DENIED BECAUSE USERNAME OR PASSWORD INVALID ON DOMAIN
PLZ HELP ME FOR THIS
email:devanshu2k5@yahoo.co.in
All dumbos who r asking question n passwords.. plz understand the disclaimer by Prashanth at the beginning of the post….n stop asking for username and password…
can anyone please hack 2mbps and send the username and password to me.. please…. i dont know how to do this.
my id is jagu1236@gmail.com
Port binding is still not implemented on all areas. but if possible stay away from misusing someone else account. if he/she complaints about account misuse. u might be caught.
Digital Compass – http://tech-atom.blogspot.com
Bsnl had already port binded the system but still there are some problems and I am having accounts which are working on my computer…
So dont tink that bsnl is still secure for all…just keep searching ang trying and you will get one like me……..
are yaar the main problm is bsnl is using new ip range which is different for different regions
my is 117.198.0.0 to 117.198.5.255
this is for mp & cg region
sombdy can pls tell abt their range
to know more abt new ip………………
this is trap,they are trying to find cheaters.
Dear Friend,
I have got lot of username and passwords, but I could not able to use them. my ADSL modem says Authentication Error.
Is if the victm using the net, we can use at same time?
Please comment on this
diskzip1@yahoo.com
http://www.allbakwaas.info/2008/06/hacking-ur-broadband.html
http://www.allbakwaas.info/2008/06/hacking-ur-broadband.html
Plz, stop whine if u are 2 incompetent.. Such as BIG letters, just takes the mood down..