[Full-Disclosure] FW: Telindus 112X Router - Remote Password Decrypting Utility

[eflorio@xxxxxxxxxxx]

This message was forwarded to me from: 
Matteo Schiavi      [ scricciolo82@xxxxxxxxxxx ]


*** TSniffer 1.0 - Readme ***

This archive can been downloaded from:

        http://net.supereva.it/noobsaibot.superdada/tsniffer/tsniffer.zip_

(use the final \"_\" in the link)

*** DESCRIPTION ***

TSniffer is a *freeware* software. Shows a known vulnerability in Telindus 
Router 112x series (6.0.x firmware), produced by Arescom. The work of the 
author of this program is based on old advisories about this vulnerability; you 
can see these advisories at:

        http://www.securityfocus.com/bid/4946
        http://www.securityfocus.com/bid/6919

Weakness in the encryption scheme was discovered by Elia Florio. Decryption
algorithms and win32 interface have been totally projected and developed by
Matteo Schiavi.


*** DISCLAIMER ***

The content of this archive is provided for educational use. The program can be 
used to get administration password only from your personal router in a closed 
LAN environment (if you forgot it) and never can be used against remote router 
owned by private company or other persons.

By using and running this executable you accept this disclaimer and you confirm 
that you\'re going to use this program only for educational purposes. The 
author declines abuse or misuse of this program. If you choose to use it in 
another way, it\'s all your responsibility. 


*** INSTALLATION ***

TSniffer requires no installation, just unpack this archive and run 
TSniffer.exe.

NOTE: this ZIP archive contains only TSniffer executable, a manifest file to 
gain Windows XP style, and this Readme. If you can\'t run this executable, you 
may download a pack of standard run-time libraries here:

        http://net.supereva.it/noobsaibot.superdada/tsniffer/tslib.zip_



Sorry for bad english ;)

Enjoy eternal life...

Matteo Schiavi      [ scricciolo82@xxxxxxxxxxx ]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html