• February 23, 2025, 05:07:46 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: dir-615 hacked another way to update firmware  (Read 16633 times)

sflesch

  • Level 1 Member
  • *
  • Posts: 5
dir-615 hacked another way to update firmware
« on: July 20, 2009, 12:03:23 PM »

Due to the default blank password, I plugged my router in for just a few seconds and it got hacked. Now when I go to the admin page, I get a message from the group that hacked it. I replaced my original router to be sure it wasn't my PC, or anything like that. I tried holding the reset button for 10 seconds and even holding the reset while powering on and I can't access anything but the hacked page.

Is there another way to update the router's firmware? I know some routers will allow you to use a program on the PC to update it, maybe through tftp?

As a last resort, I was thinking about flashing it with one of the open firmware programs out there, but that doesn't look easy.

Thanx in advance.

I wanted to add that it is a RevC hardware device. The firmware, I have to assume is wiped, so that probably does not make a difference.
« Last Edit: July 20, 2009, 06:54:31 PM by sflesch »
Logged

sflesch

  • Level 1 Member
  • *
  • Posts: 5
Re: dir-615 hacked another way to update firmware
« Reply #1 on: July 22, 2009, 06:17:57 PM »

Just to be clear, I did not "hack" this router or load unauthorized firmware. I plugged the router (I know poor practice) into the internet and before I could do anything to it, someone from out on the internet hacked it and changed the default web page.
Logged

sflesch

  • Level 1 Member
  • *
  • Posts: 5
Re: dir-615 hacked another way to update firmware
« Reply #2 on: July 29, 2009, 05:49:36 PM »

OK, so I had 2 problems.
1) I had two virtual adapters o my PC, one of which had the IP 192.168.0.1. Since the other routers I was using used 192.168.1.0 networks, this wasn't a problem with the, but since Dlink uses 192.168.0.1, when I typed that address in, I thought I was going to the router, but I was actually going to the Virtual adapter.  Since the virtual adapter had no web page, it redirected me to my local web page, which should have been the web page I share to the world, but...
2) Someone hacked my web page using the local IUSR windows account and replaced it with their page. I thought it was the routers page. I realized I had been hacked when I tried to go to my web page from the outside world and I got the hacled page instead.
Logged