0

I wanted to know what a person can do if he has access to the Router Settings? I know he can change the password and stuff but can he do any real password sniffing stuff?

closed as too broad by Steffen Ullrich, Arminius, Xander, Xiong Chiamiov, Steve Jun 5 '17 at 14:03

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Depends on the router/ap. But typically they all have a interface for sniffing or redirecting traffic. – eckes Jun 3 '17 at 14:15
  • @eckes Mine has something called Routing which can route some connections through a gateway. Idk if that could do anything. I can also open ports using port forwarding – Vivek Jun 3 '17 at 14:57
  • Possible duplicate of Is there any security threat with open WiFi connection? – Xiong Chiamiov Jun 3 '17 at 23:51
  • 1
    @XiongChiamiov Those don't seem to be duplicates. Access to the network doesn't mean access to the router (if it did, that really would be a problem). This question does seem a bit broad as it really depends on the router, but I'm going to vote to leave this open, as a reasonably short answer could still list all possibilities, and most home routers provide at least somewhat similar options. I actually think that this is a pretty good question (if it's not a duplicate; and the title and body of the question could also use some work) – tim Jun 4 '17 at 19:57
2

depending on the router, you can set up a proxy server and redirect all traffic to said server.

This would allow you to do any MITM attacks you would normally be able to do but without having to ARP the victims. A simple google of MITM attacks could open up a large range of ideas for your self.

DNS attacks (e.g. redirection) and SSL stripping / denial are good example of things you can do if you set up a proxy server on the router.

Basically redirecting traffic to a device to handle it with your rules is a start, and then decide what you want to do from there.

Not the answer you're looking for? Browse other questions tagged or ask your own question.