How to gain admin privileges on D-Link router if the isp is not allowing me to do so

administratorrouter

I switched to new ISP yesterday, they gave me a D-Link router, can't use my old router. I want to change the wireless password, went to 192.168.1.1, I can login with the the username and password user user, but not as admin.

On the catalog it says that the default username and password are admin admin, tried that didn't work. Tried admin and no pass, tried many combinations, none worked.

I asked some other users and they said that the isp is blocking the users from logging in as admins, and blocking the reset button, and said that there's a hack where you do something like:

cmd> telnet "router ip" and do something like dumpcfg

Could you please give a better explanation on how to gain admin privileges on your own router if your isp is not letting you do so by default?

For what it's worth, I live in Lebanon and my ISP is Ogero.

Best Answer

I managed to crack the password, I'll post the answer as a future reference to future users if you don't mind.

  • Use Telnet (enable it if you're on windows) and connect your laptop to the router using a cable.

  • Open a terminal or command prompt and type telnet 192.168.1.1 or whatever your local IP is. my username and password are user and user they are usually the default username and password for non admin users.

  • type dumpcfg and copy the output to a text file.

  • the output is almost full of crap, so i'm not going to paste it, you're only interested, in two lines, the first is sysUserName value="" and the second is sysPassword value="" usually, it's sysUserName value="admin" and as for the password it's sysPassword value="Base64EncodedString"

  • Go to a Base64 decoder, copy the encoded password string, and click bas64 to normal string. In my case, the encoded password was <sysPassword value="bXkxMTAxMTM="/> i decoded it, so my password was my110113.

I only tried that on D-Link router, I don't know about other routers, but as long as they use Base64, I see no reason why it shouldn't work, and it's not hacking, it's gaining administrative privileges on your own router.

Related Question