Printable View
the other day i was scanning a few nodes on my network for no reason, and detects my router to have ftpd1.6. i try going to ftp://192.168.0.1, it asks for a login, i enter admin and its password, no luckm i enter root, then a password and it says bad command. I was wondering if anyone knew how to login
*edit* i can login with an FTP client using root and my admin password i dont know how much more i can do
DLink DI-704, DI-704P, DI-713, DI-713P, DI-714P+ and DI-804HV Routers
1. Power the unit off by unplugging its power adapter.
2. Insert a paper clip in to the reset pinhole. Press and hold the reset button
with light pressure.
3. Power the device back on by plugging it in. Continue to hold the reset
button.
4. Watch the lights on the front of the gateway. The M1 & M2 should come on
solid. When the M1 & M2 begin to blink slowly, release the reset button.
5. The unit will reboot itself and should be at factory defaults. If the M1
light is not blinking about once per second, recycle the power on the gateway.
(Important: If the M1 & M2 lights continue to blink rapidly, you held the reset
button for too long. Power the device off and repeat the reset procedure.)
6. The default username for dlink routers is admin. The password is BLANK.
according to http://www.phenoelit.de/dpl/dpl.html
If your router asks only for a password, use admin (lower-case). You can now surf to
the router and configure it.
7. Additional support/information for DLink routers can be found at
http://support.dlink.com
Hope this helps. Computernerd22
thats not what i wanted, i know my passwords etc to get to web interface and know all that, theres a hidden ftp server on there, you can login, so far only command i can do is recv.
no matter what remote file i type i get a 1.3mb file with a jumble of stuff, i think it mite be everything on the router as i can read my logs and firewall ruels etc amongst the weird characters, if anyone out there knows how to do anything else with this pm me. Its kinda cool, some one mine be able to use this for something ;D
The ftp server in all the personal firewalls is used to update the firmware..... That's why it is there.
Firmware is done with TFTP though isn't it? What were you expecting to find on there? The only thing it does is take those .bin files and upload them to the router. As Tiger said this is the Firmware.
when i update firmware i do it thought the web thing so it would be over http, the only command i have been able to use is, recv randomfile.anything
everything else e.g directory listing, uploading etc gives me a big fat "permission denied", funny thing is using the web interface (http) you set root no where, only an admin login name, i think FTP mite be something for D-Link to use not sure tho
Here is a neat emulator for the D-LINK di704 Router.
http://support.dlink.com/emulators/di704/IndexLogon.htm
Is this the one? http://support.dlink.com/downloadsQuote:
when i update firmware i do it thought the web thing so it would be over http, the only command i have been able to use is, recv randomfile.anything
Except, you do it through the Routers GUI.
Depends on make and model number. Some use Tiny FTP for firmware upgrades but some models of d-link do not. example di704 doesn't use tftpQuote:
Firmware is done with TFTP though isn't it?
http://www.dlink.co.in/dlink/Product...and/di704p.htm
but the d-link DSL-500T does.
http://www.dlink.co.in/dlink/Product...nd/dsl500t.htm
nope thats not it sorry, it UP model
http://support.dlink.com/emulators/di704up/
but its not TFTP becuase you login and can use commands, but as i said before all but recv randomfile.anything is the other thing that works.
also i dont know if i included the scan i did on it returned FTPd 1.6
well i emailed them, got a reply that the FTP daemon was used for "Design and troubleshooting for D-link engineers", so unless you send dlink a nice little form asking for information, which they will probly turn down you dont get any information on it
next time you do a firmware update, sniff it.
see if it really is updating via http or if it is using ftp instead...
I take it you've tried other ftp commands on it and they just aren't working?
Other than that... I'm not sure there is much more that you'd want to do with it? I'd say store files.. .but the memory in those things are big enough for firmware, your settings and some logs. Heck, most of the time, the logs are only in the memory, so once you powercycle it, the entries in the log buffer are lost. Most cheap routers I've seen have between a 2 and 8mb flash memory chip in there.
Maybe try to find a DoS in the ftp software? Buffer overflow or fuzzer?
But then again... the firewalls on those NAT routers generally block ftp by default.
If it were affected by a DoS, it'd have to be launched from your LAN with the default firewall/port forwarding rules...
Heck, those things are easy enough to DoS without trying to attack it... just get a couple of decent torrents going and you'll see the things almost smoke!
I beleive that dlink may reuse open source code in their firmware?
Maybe look for the code they're using for ftp and see what commands it will accept?
I know that linksys was using open source firmware for quite a while. Not sure if they still are...
Even in my ciscos, there isn't much space for other things. I've got about 8mb of free space (maxed out on the flash) after the IOS, several config backups, the SDM and whatnot.
Maybe a good place to stash some small files for safe keeping? It'd be one of the last places I looked...
Just curious... how is that dlink holding up for you? Every single one I've used or had to support was horrible... but that was just my experience...
Just some rambling thoughts from someone who had a hell of s stressful day....