Globe Wired DSL Vulnerability

I was fooling around with my modem from Globe DSL when I stumbled upon an annoying security hole in Globe's wired DSL service.
Here's how it works.
Normally, to access the web based config page of your modem you'll have to access it through 192.168.0.1
now, your modem once connected to Globe's network is also assigned an IP address. ex. 180.xxx.xxx.0
take note this is different from your Public IP which usually starts with 120.xxx.xxx.xxx

This got me a bit curious, that if I could access my own config page using the modem's IP address then maybe I could access the same config page of other subscribers.

So I created a multi threaded app that does an http web request to a specific IP range and this is what I got.

from 1 - 64, 3 subscribers that gave an http response.

let's check subscriber #1

Here's #2

and here's #3

and here's the app. (removing the ip address of course.) take note, this is a very crude implementation and would do 64 threads by default (would've gone higher but apparently there's an
undocumented limit to how WaitHandle.WaitAll could only handle 64 threads at a time and since this is just a testing app that I didn't bother to find a work around

now, what can you do that you can access other people's modems? change their settings, account info, lock them out of their internet service etc...
and why didn't globe fix this vulnerability to their subscribers? I'm guessing so they could easily access it when they are troubleshooting their modems. however it wouldn't hurt
to at least have a basic username / password challenge first :/

Tools I can't live without...

Every developer has his/her set of "making my day to day life easier" in the workplace.

Most in this list are free while the rest has 30 day trials you could download from their site.

I'll go in depth on how to use each one in the weeks to come, but for now a short description and links.

Resharper -
This for me makes coding a whole lot easier with real time compiler error notifications, Code refactorings, Safe Deletes, Safe Renames, a more robust "Find" function, Code Analysis and my favorite. Unit testing and integration with dotTrace Profiler.


Fiddler -

I Can't remember how many times this small free app has saved me days of debugging hell, pretty much this app acts as a proxy capturing all http "REQUESTS" from your browser as well as capturing all "HTTP RESPONSE" that you will get from the web server you're requesting from.

it will provide various information that isn't normally seen like, file sizes, html raw formats, request hops, cookie information, XML.

if you're doing custom Requests to a web server or sending unusual POST messages. this is the tool that will make things a whole lot faster.


Notepad++ -
This is what the standard notepad of windows should have been, Text Compares, spell check, text compare, XML formatting, HTML cleanup, Tabbed interface.


SandCastle -
Making inline comments, XML code comments into a generated help file or set of html files, code documentation just got easier. to top it off it's free!

Red-Gate SQL
-
Red-Gate's SQL Toolbelt is the one stop tool for database control, with tools like SQL Compare (table, Stored procs, views etc).

SQL data compare.

Data Generator (with customizable rules).

SQL Doc - ever had problems remembering who last modified that table or stored proc? or what it was a month ago?, fast and easy to use database documentation is the answer.

and my personal favorite SQL Prompt - integrates with your management studio and provides a much needed intellisense, auto complete and refactoring.


FireBug (firefox addon) - Simply the best javascript debugger out there, view your DOM, add breakpoints, notifies you of errors you never thought were there.

iMacros - Ever had one of those web apps where you have to go through steps 1 - 5 to be able to debug step 6? this firefox addon captures all your http requests and response to get you to step 6 with a click of a button.


Hope you enjoyed this post as much as I did writing it. I'll go in depth with these tools in the coming weeks to come.