Webfig Terminal Offline Brute Force Attack
Posted by deepcore on September 29, 2015 – 7:46 am
The encryption scheme used by Mikrotik’s Webfig terminal software as seen on the RB750GL running RouterOS version 6.18 is susceptible to offline brute force attacks that allow a third party to recover login credentials (username and password) as well as full decryption of the terminal session. Full write up and proof of concept tools are included in this archive.
Post a reply
You must be logged in to post a comment.