Otherwise we may use some preprepared dictionaries, as for example thoose at: If we have an idea which our passwords we had set up on the box, but we do not know precisely which one is correct we may create a text file with the list of possible passwords. The tool performs a brute-force dictionary attack, so we have to have a dictionary with the list of vocabularies. Inside of debian/ubuntu based linux we will simply install python using apt-get install pyhton3 3) Dictionaries The mkbrutus tool is written in Python, so be able to run it we need a system with installed python 3. Nmap done: 1 IP address (1 host up) scanned in 0.08 secondsĮventually when we install our box for first time we will open the port (menu IP -> services).īut of course we are opening the security risk, (the port is usually disabled on higher versions of RouterOS). Or shortly scan just the port nmap 192.168.1.2 -p 8728
Nmap done: 1 IP address (1 host up) scanned in 0.20 seconds Read data files from: /usr/bin/./share/nmap at 17:57Ĭompleted Parallel DNS resolution of 1 host. Initiating Parallel DNS resolution of 1 host. We may test it running nmap targetinng on an IP address of the box nmap -v MIKROTIK_IPĬompleted ARP Ping Scan at 17:57, 0.01s elapsed (1 total hosts) The tool is sucessfull only if our mikrotik device have opened required 8728/TCP port. Prerequisities 1) Mikrotik must have enabled the API service Our mikrotik device must of course have opened the 8728/TCP port. The tool is developed in Python 3 and it performs bruteforce attacks (dictionary-based) against RouterOS (ver. One of such tools is MKBRUTUS, which have been developed mainly as a password bruteforcer for MikroTik devices or boxes running RouterOS. Gaining access back to our device we may use tools used for pen testing (think ethical). Be able to login into an our MikroTIK device we have to memorize or at least remember our password, what could be sometimes (usually after a years of correct work) problem.
0 kommentar(er)
