Comments for Krzysztof Burghardt’s blog

Comment on DASAN H665 has vendor backdoor built into BusyBox’s /bin/login by kocio

kocio — Tue, 11 Aug 2020 18:36:01 +0000

In reply to ivan. I stumbled upon this thread looking for solution regarding the same problem. I am sure you have already found the solution, but for future generations: try the 8080 port.

Comment on DASAN H665 has vendor backdoor built into BusyBox’s /bin/login by ivan

ivan — Wed, 25 Mar 2020 20:25:40 +0000

hello

I have H660RM, but I can’t access to router 192.168.55.1
I ran map and I see that ports 23 53 and 888 are opened, can I enter setup three this ports?
I would like to setup router manuals but I can’t access it password is standard user/1234

Comment on Sam naprawiam lampę insektobójczą Blaupunkt BP-GIK04 by Krzysztof Burghardt

Krzysztof Burghardt — Sat, 15 Feb 2020 20:25:24 +0000

In reply to zjawka67. Złącze BNC opracowali Paul Neill i Carl Concelman. Podejrzewam, że mogłeś zobaczyć moje zdjęcie złączy BNC.

Comment on Sam naprawiam lampę insektobójczą Blaupunkt BP-GIK04 by zjawka67

zjawka67 — Mon, 20 Jan 2020 14:48:56 +0000

No takiego IT-mana to ja lubię. Natrafiłem na ciebie przypadkiem studiując Comptia Network+ gdzie podano że niejaki Krzysztof Burghardt stworzył końcówkę BNC connector. Nie wiem czy to ty ale blog mi się spodobał. Pozdrawia nauczyciel historii z Londynu, który już ma dość uczenia w tutejszych szkołach i się przekwalifikowuje na Cyber Security industry.

Pokój,

Comment on diag_tool.cgi on DASAN H660RM devices with firmware 1.03-0022 allows spawning ping processes without any authorization leading to information disclosure and DoS attacks by Krzysztof Burghardt

Krzysztof Burghardt — Wed, 15 Jan 2020 20:59:30 +0000

In reply to Tim. Hi Tim! I tried to contact Dasan on multiple channels, without any success, before this has been published. As they never contacted me back, I'm unable to tell if or when they released any patches.

Comment on diag_tool.cgi on DASAN H660RM devices with firmware 1.03-0022 allows spawning ping processes without any authorization leading to information disclosure and DoS attacks by Tim

Tim — Wed, 08 Jan 2020 23:54:23 +0000

Hello,

I am compiling research. Could you let me know, what day did you inform Dasan, and on what day did they patch? I am researching disclosure-to-patch timelines.
Thank you,
Tim

Comment on nCipher HSM with OpenSSL by Vignesh

Vignesh — Tue, 23 Oct 2018 16:23:27 +0000

Hi,
In my code
ENGINE_by_id does not identify CHIL also tried with “chil”
(hwEngine = ENGINE_by_id(“CHIL”)) is always NULL
but the openssl say that chil is available as follows

# openssl engine -t chil
(chil) CHIL hardware engine support
[ available ]
—-
Please help.
Vikki

Comment on nCipher HSM with OpenSSL by hey

hey — Tue, 22 Nov 2016 00:08:19 +0000

Andrea Campi’s blog post ia available at archive.org:
http://web.archive.org/web/20090208183539/http://blog.webcom.it/articles/2006/04/07/ncipher-nethsm-with-openssl-tutorial/

Comment on How to restrict Internet access to known IP/MAC on OpenWRT? by Uwe

Uwe — Thu, 27 Oct 2016 13:49:51 +0000

Instead of generating a script and pipe that to sh, you can also do:

while read mac host; do
iptables … –mac-source $mac;
done < /etc/ethers

which is a bit easier to parse for humans

Comment on ARP Tools by Krzysztof Burghardt

Krzysztof Burghardt — Fri, 30 Oct 2015 23:29:45 +0000

In reply to Michael.

Thanks! Patched version is on GitHub at https://github.com/burghardt/arptools