{"id":44,"date":"2022-10-22T19:22:30","date_gmt":"2022-10-22T19:22:30","guid":{"rendered":"https:\/\/forgeat.fr\/blog\/?p=44"},"modified":"2025-02-07T19:15:20","modified_gmt":"2025-02-07T19:15:20","slug":"routeur-tp-link-tl-wr1043nd-gare-aux-backdoors","status":"publish","type":"post","link":"https:\/\/forgeat.fr\/blog\/2022\/10\/22\/routeur-tp-link-tl-wr1043nd-gare-aux-backdoors\/","title":{"rendered":"Routeur TP-Link TL-WR1043ND: gare aux backdoors"},"content":{"rendered":"\n<p>Bonsoir, ce routeur bon march\u00e9 m&rsquo;a d\u00e9\u00e7u: le firmware d&rsquo;origine est \u00e9quip\u00e9 d&rsquo;une backdoor, trouv\u00e9e il y a quelques ann\u00e9es par des polonais. Un fac\u00e9tieux s&rsquo;en est servi (de la backdoor) pour mettre mon ordinateur principal en mode contr\u00f4le parental strict, plus d&rsquo;acc\u00e8s internet, juste acc\u00e8s au routeur: l&rsquo;attaquant a jou\u00e9 avec iptable \ud83d\ude00 . Ce n&rsquo;\u00e9tait pas visible dans le gestionnaire graphique du routeur.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"768\" src=\"https:\/\/forgeat.fr\/blog\/wp-content\/uploads\/2022\/10\/IMG_4943-1024x768-1.jpg\" alt=\"\" class=\"wp-image-45\" srcset=\"https:\/\/forgeat.fr\/blog\/wp-content\/uploads\/2022\/10\/IMG_4943-1024x768-1.jpg 1024w, https:\/\/forgeat.fr\/blog\/wp-content\/uploads\/2022\/10\/IMG_4943-1024x768-1-300x225.jpg 300w, https:\/\/forgeat.fr\/blog\/wp-content\/uploads\/2022\/10\/IMG_4943-1024x768-1-768x576.jpg 768w\" sizes=\"auto, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 543px, 580px\" \/><\/figure>\n\n\n\n<p>Cette attaque a eu lieu au moment d&rsquo;un \u00e9change via mel un peu chaud. J&rsquo;ai d\u00fb mettre un firmware alternatif et proc\u00e9der \u00e0 une installation de Lede\/Openwrt afin de fermer la porte!<\/p>\n\n\n\n<p>(Pour m\u00e9moire syst\u00e8me d&rsquo;exploitation \u00e0 domicile: des Xubuntu \u00e0 jour mais les joyeux hackers s&rsquo;en donnent \u00e0 c\u0153ur joie chez moi. \ud83d\ude09 )<\/p>\n\n\n\n<p>les r\u00e9f\u00e9rences: <a href=\"https:\/\/sekurak.pl\/tp-link-httptftp-backdoor\/\">https:\/\/sekurak.pl\/tp-link-httptftp-backdoor\/<\/a><\/p>\n\n\n\n<p>En musique: <a href=\"https:\/\/youtu.be\/uk_ilymWo4s\">https:\/\/youtu.be\/uk_ilymWo4s<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bonsoir, ce routeur bon march\u00e9 m&rsquo;a d\u00e9\u00e7u: le firmware d&rsquo;origine est \u00e9quip\u00e9 d&rsquo;une backdoor, trouv\u00e9e il y a quelques ann\u00e9es par des polonais. Un fac\u00e9tieux s&rsquo;en est servi (de la backdoor) pour mettre mon ordinateur principal en mode contr\u00f4le parental strict, plus d&rsquo;acc\u00e8s internet, juste acc\u00e8s au routeur: l&rsquo;attaquant a jou\u00e9 avec iptable \ud83d\ude00 . &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/forgeat.fr\/blog\/2022\/10\/22\/routeur-tp-link-tl-wr1043nd-gare-aux-backdoors\/\" class=\"more-link\">Continuer la lecture<span class=\"screen-reader-text\"> de &laquo;&nbsp;Routeur TP-Link TL-WR1043ND: gare aux backdoors&nbsp;&raquo;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,6],"tags":[],"class_list":["post-44","post","type-post","status-publish","format-standard","hentry","category-hacking","category-techniques-internet"],"_links":{"self":[{"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/posts\/44","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/comments?post=44"}],"version-history":[{"count":1,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/posts\/44\/revisions"}],"predecessor-version":[{"id":46,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/posts\/44\/revisions\/46"}],"wp:attachment":[{"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/media?parent=44"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/categories?post=44"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forgeat.fr\/blog\/wp-json\/wp\/v2\/tags?post=44"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}