Router
Replace router software with a customizable system for network controls and community packages.
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
Check the project and hardware shown for each feature.
OpenWrt · v1 · Atheros AR9103 Wi-Fi — Source documentation (openwrt.org)
OpenWrt · v2 · Qualcomm Atheros QCA9558 Wi-Fi — Source documentation (openwrt.org)
OpenWrt · v3 · Qualcomm Atheros QCA9558 Wi-Fi — Source documentation (openwrt.org)
OpenWrt · v4 · Qualcomm Atheros QCA9563 Wi-Fi — Source documentation (openwrt.org)
v1 · Atheros AR9103 Wi-Fi — Source documentation (openwrt.org)
v2 · Qualcomm Atheros QCA9558 Wi-Fi — Source documentation (openwrt.org)
v3 · Qualcomm Atheros QCA9558 Wi-Fi — Source documentation (openwrt.org)
v4 · Qualcomm Atheros QCA9563 Wi-Fi — Source documentation (openwrt.org)
Saved scan
From our saved security research.
Prioritized by known exploitation, severity, then date.
TL-WR1043ND
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
TP-LINK TL-WR1043ND
TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.
TP-LINK TL-WR1043ND
TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.
TP-LINK TL-WR1043ND
An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the username is cleartext, and the password is hashed with the MD5 algorithm (after decoding of the URL encoded string with base64).
TP-LINK TL-WR1043ND
An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials.
