How to completely break through the limits of ADSL Router Access

With the development of China's routing industry, the application of the ADSL Router is also more extensive. Here we mainly introduce the configuration of the ADSL Router. There are two ways for the ADSL Router to share the Internet, one is proxy, one is address translation (NAT). Generally, the routing method is actually the NAT method. In fact, the routing and NAT principles are different. We will not discuss them here, currently, the ADSL Router cat generally has the NAT Function. It is more economical and convenient to use its own function to achieve Internet sharing. This article mainly discusses this method.

If you want to block more than one computer from accessing the internet, you must find that there are more than one machine behind the sharing, after NAT translation, the addresses of computers accessing the Internet over the Intranet are changed to 192.168.0.1, And the MAC addresses are also converted to the MAC addresses of the ADSL Router. That is to say, in principle, you cannot find several machines accessing the internet by directly capturing NAT-converted packets at the egress of the ADSL Router. How did we find it? After research, it is found that it uses a variety of methods to detect whether users use the Internet sharing mode, so as to limit, the following are separately cracked.

If your NIC Driver directly provides the clone MAC address function, such as the RTL8139 chip from RealTek, congratulations! Click "Start> set> Control Panel ", double-click "network and dial-up connections", right-click the NIC icon to modify the MAC address, and select "properties ". On the "General" tab, click the "configuration" button and click the "advanced" tab. In the "attribute" area, you should see a project called "Network Address" or "Locally Administered Address", click it, and under the "value" on the right, enter the MAC address value you want to specify. You must enter 12 numbers or letters consecutively. Do not enter "-". After the system is restarted, the settings take effect for Windows 98 and Windows 2000/XP users. For more information, see System Instructions ).

Click Start> Run, type winipcfg, select the NIC you want to modify, and record the MAC address value. Click "Start> Run" and enter "regedit" to run the Registry Editor. before modifying the registry, you must back up the Registry.) based on the registry tree structure, find "HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ Class \ Net" in sequence, and you will see subkeys like "0000", "0001", and "0002. Click the "0000" sub-key and search for the content of the "DriverDesc" key under the sub-key until you find the NIC registry information that is exactly the same as the target. After finding the correct Nic, click "Edit> New> string" in the drop-down menu, and the name of the string is "networkaddress". Double-click the name of the newly created "networkaddress" string, you can enter a value. Enter the new MAC address value you specified. The new MAC address should be a 12-digit number or letter with no "-", similar to "00C095ECB761.

1. in primary keys such as "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Class \ 4D36E972-E325-11CE-BFC1-08002BE10318 \ 0000, 0001, and 0002", you may have installed more than one network adapter, therefore, the primary key contains multiple primary keys similar to "0000, 0001". In this case, you can find the primary key with which the DriverDesc content matches the description of the ENI you want to modify, for example, 0000 ".
 
2. In the primary key mentioned above, add a string named "NetworkAddress" and set its value to the MAC address you want. It must be written continuously as "001010101010 ".
 
3. then add a primary key value "NetworkAddress" to "NDI \ params" under the primary key, add a string named "default" under the primary key, and write the value to the MAC address to be set, continuous writing, such as "001010101010 ". In fact, this is only the "Initial Value" of the advanced attributes mentioned later in the vro configuration. The actual MAC address used depends on the "NetworkAddress" parameter mentioned in, in the future, the Intermediate Value of the advanced attribute is the value given by "NetworkAddress" instead of the value given by "default.
 
4. add a string named "ParamDesc" under the primary key of "NetworkAddress". The function is to specify the description of the "NetworkAddress" primary key. The value can be "MAC Address" (you can also set it as needed, this is only a description. It doesn't matter. This value will appear as a description when you directly modify the MAC address in the future). In this way, the attributes of network neighbors will be opened after the restart, double-click the corresponding Nic item and you will find an advanced setting with the MAC Address (ParamDesc, (^ 29041103a ^) 1 that you set earlier) under it, this is the new "NetworkAddress" that you add in the Registry in step 2. You only need to modify the MAC address here.
 
5. Close Registry Editor and restart. Your NIC address has been changed. Open the properties of the network neighbor. Double-click the corresponding Nic item and you will find an advanced setting item for MAC Address. It is used to directly modify the MAC address, and can be changed at any time without restarting. Most NICs can change their MAC addresses by modifying the NIC attributes in the control panel. In Device Manager, right-click the NIC icon to modify the MAC address and select the properties/Advanced tab. In the "properties" area, you can see a project called "Network Address" or another similar name. Click it and click it at the bottom of the "value" on the right, enter the MAC address to be specified. You must enter 12 hexadecimal numbers or letters consecutively. Do not enter "-".

If you want to restore the MAC Address of the Network card to its original state, you only need to set the single option on the right of the "Network Address" item to "not displayed" and restart the Network card. In WIN2000, select "no". Of course, you do not need to restart it. Through SNMP Simple Network Management Protocol) to discover multi-host internet sharing. Some ADSL Router cats have built-in SNMP services through scanning software (ipscan, superscan ......) scan and find that port 161 is open, and port 161 is the service port of SNMP Simple Network Management Protocol). Is it the number of hosts found through the SNMP protocol, and xscan is used to scan the cat for vulnerabilities, there is a default password, which is logged on to the management interface of the cat but cannot be found to close the SNMP service. It seems that it is a backdoor, and it can be concluded that it is the number of hosts found through the SNMP protocol. In order to further confirm that a management software of SNMP, ActiveSNMP, can be used to view the connection status of the ADSL Router cat, it can be clearly seen that the number of hosts simultaneously accessing the Internet can be found through the SNMP protocol.