LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Hacked by my neighbour who is using kali Linux I think (https://www.linuxquestions.org/questions/linux-security-4/hacked-by-my-neighbour-who-is-using-kali-linux-i-think-4175624013/)

Danwilliams1989 02-20-2018 04:28 AM

The admin passwords aren’t standard with BT they are like a random string of numbers and letters upper and lower case.
Plus the passwords are decently strong. I have also made 18 character long passwords with number letter upper lower case symbol combinations. And yet still nothing. It’s just constant. If I thought I’d miss something I’d hold my hands up and say my fault. I’ve been so careful. This has been on going for 7 months the day I moved into the house.

Trihexagonal 02-20-2018 06:15 AM

Quote:

Originally Posted by Danwilliams1989 (Post 5821823)
I wanted to mention as well is that they are coming into the network port forwarding at port 0 and turning on upnp to guide and hack my devices how is that possible ?

What a coincidence... About a week ago we were talking about port 0 exploits in the FreeBSD forums. Here's how I deal with it in pf (OpenBSD packet filter firewall), and have had a rule to do so since Win98:

Code:

### Block to and from port 0
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0

I use the same rule in OpenBSD and FreeBSD.

When I switched to cable I didn't get a router with the package so I ran by FreeBSD and OpenBSD boxen directly facing the internet for months. No sweat. I live in a large apartment complex and would no sooner use wi-fi than leave my front door unlocked when I went to bed.

You, my friend, need a router at the bare minimum, an Ethernet LAN preferably IMO, and if you have a spare machine with 2 network cards I recommend pfSense as a router/firewall solution. I ran one for a couple years and was very happy with it. There is a learning curve to it though.

fatmac 02-20-2018 07:19 AM

When I first got a BT Hub, I found out that one of their millions of hotspots, was my router!
I contacted them & had them close that access!

Trihexagonal 02-20-2018 07:31 AM

Quote:

Originally Posted by Danwilliams1989 (Post 5821823)
They are using something called teredo isatap something.

This should shed some light on the subject. From superuser.com:

Quote:

Teredo is a built-in mechanism in Windows systems that is used to give a single system behind an IPv4 NAT access to IPv6. Like 6to4 it uses public relays. Teredo combines this with a setup protocol using Teredo servers (by default those hosted by Microsoft) to detect and break through the IPv4 NAT. It is not very reliable, but Teredo is only used when explicitly connecting to an IPv6 address and not when connecting to a hostname and looking up the addresses in DNS. This happens for example when using BitTorrent, and there the lesser reliability doesn't matter a lot.

ISATAP is a managed technology for providing IPv6 on an IPv4 network. It emulates IPv6 connectivity on the IPv4 infrastructure. IPv6 Router Discovery usually uses multicast. This isn't possible on an infrastructure based on IPv6-over-IPv4 tunnels, so ISATAP solves that in a different way. An ISATAP router is provided on the network and its IPv4 address is made known to the ISATAP hosts (usually using the hostname isatap. in DNS). The ISATAP hosts then can use that address to set up their IPv6 connectivity.
https://superuser.com/questions/5563...eredo-adapters

TB0ne 02-20-2018 09:43 AM

Quote:

Originally Posted by Danwilliams1989 (Post 5821929)
The admin passwords aren’t standard with BT they are like a random string of numbers and letters upper and lower case.
Plus the passwords are decently strong. I have also made 18 character long passwords with number letter upper lower case symbol combinations. And yet still nothing. It’s just constant. If I thought I’d miss something I’d hold my hands up and say my fault. I’ve been so careful. This has been on going for 7 months the day I moved into the house.

Think about what you just said here...I'm going with Dugan's theory.

*YOU* may have made a user ID with a better password, but the ADMIN passwords from whatever device they give to you are NOT that. Since they are ISP provided devices, it makes it INCREDIBLY easy to crack, since the users know what character sets to use, length, etc. And not sure what you think you're going to be able to accomplish on a Linux forum, if **YOU** are not using Linux. Nothing you've described (like getting ad pages, etc.), would indicate that you're 'hacked', that Linux (much less Kali) was used to perform this 'hack', nor that your neighbor is guilty of anything more than unauthorized use of your wifi. When you throw in the police call for harassment, it seems to indicate a larger issue.

Best advice? Get a separate home wifi access point with strong security, plug it into your BT supplied router and turn OFF the BT supplied Wifi. I use the Google Wifi router at home, and its excellent, but there are many similar devices with good security as well. Hiding your SSID isn't a bad thing either.

Danwilliams1989 02-20-2018 11:25 AM

Quote:

Originally Posted by Trihexagonal (Post 5821943)
What a coincidence... About a week ago we were talking about port 0 exploits in the FreeBSD forums. Here's how I deal with it in pf (OpenBSD packet filter firewall), and have had a rule to do so since Win98:

Code:

### Block to and from port 0
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0

I use the same rule in OpenBSD and FreeBSD.

When I switched to cable I didn't get a router with the package so I ran by FreeBSD and OpenBSD boxen directly facing the internet for months. No sweat. I live in a large apartment complex and would no sooner use wi-fi than leave my front door unlocked when I went to bed.

You, my friend, need a router at the bare minimum, an Ethernet LAN preferably IMO, and if you have a spare machine with 2 network cards I recommend pfSense as a router/firewall solution. I ran one for a couple years and was very happy with it. There is a learning curve to it though.

You’ll have to dumb it down for me lol. Not used to all the acronyms.

Right bear in mind I just literally got Ubuntu installed last week. Can you expand in lamens terms for me about the pf.


Can you talk me through the process of using that block at a more newbie level please. I am using Ethernet for some stuff is that more secure. I’m starting to think this learning curve is going to be expensive lol. What is pfSense. I have a couple of old ISP HOMEHUBS (routers) but they are just standard. Would linking them up help??

Danwilliams1989 02-20-2018 11:28 AM

Quote:

Originally Posted by Trihexagonal (Post 5821943)
What a coincidence... About a week ago we were talking about port 0 exploits in the FreeBSD forums. Here's how I deal with it in pf (OpenBSD packet filter firewall), and have had a rule to do so since Win98:

Code:

### Block to and from port 0
block quick proto { tcp, udp } from any port = 0 to any
block quick proto { tcp, udp } from any to any port = 0

I use the same rule in OpenBSD and FreeBSD.

When I switched to cable I didn't get a router with the package so I ran by FreeBSD and OpenBSD boxen directly facing the internet for months. No sweat. I live in a large apartment complex and would no sooner use wi-fi than leave my front door unlocked when I went to bed.

You, my friend, need a router at the bare minimum, an Ethernet LAN preferably IMO, and if you have a spare machine with 2 network cards I recommend pfSense as a router/firewall solution. I ran one for a couple years and was very happy with it. There is a learning curve to it though.

Quote:

Originally Posted by TB0ne (Post 5822007)
Think about what you just said here...I'm going with Dugan's theory.

*YOU* may have made a user ID with a better password, but the ADMIN passwords from whatever device they give to you are NOT that. Since they are ISP provided devices, it makes it INCREDIBLY easy to crack, since the users know what character sets to use, length, etc. And not sure what you think you're going to be able to accomplish on a Linux forum, if **YOU** are not using Linux. Nothing you've described (like getting ad pages, etc.), would indicate that you're 'hacked', that Linux (much less Kali) was used to perform this 'hack', nor that your neighbor is guilty of anything more than unauthorized use of your wifi. When you throw in the police call for harassment, it seems to indicate a larger issue.

Best advice? Get a separate home wifi access point with strong security, plug it into your BT supplied router and turn OFF the BT supplied Wifi. I use the Google Wifi router at home, and its excellent, but there are many similar devices with good security as well. Hiding your SSID isn't a bad thing either.

Thanks for the advice

Trihexagonal 02-20-2018 12:17 PM

Quote:

Originally Posted by Danwilliams1989 (Post 5822063)
Right bear in mind I just literally got Ubuntu installed last week. Can you expand in lamens terms for me about the pf.


Can you talk me through the process of using that block at a more newbie level please. I am using Ethernet for some stuff is that more secure. I’m starting to think this learning curve is going to be expensive lol. What is pfSense.

I am not the guy to tell you how to set up Linux.

I've ran a Debian box not so long ago and used ufw, Uncomplicated Firewall. If you google it you can find the syntax and should be able to make a rule for port 0. It's not hard to set rules once you see how its done.

You're probably better off sticking with a commercial router/firewall than pfSense. It uses the OpenBSD pf packet filter firewall but takes some getting used to and you have enough on your plate already.

Ethernet is what I consider most secure.


BTW, this is how I got started, too. ;)

Danwilliams1989 02-20-2018 12:32 PM

Wow really you sound like a pro lol.

To me anyway.

I don’t mean to be funny but if you don’t ask for help when your stuck how are you supposed to get better. I’m sure I’ll pick it up in no time. I liked the look of Ubuntu. So I went with that just bought myself a book now to start with the basics. Going to take some classes on Lynda.com and do some research on the web. Have no idea what I’m doing haha.

If you don’t ask you don’t get right ?

I see if I can make head or tail of what your talking about but I will be googling how to block a port forward at port 0.
Am I on the right track. I knew I should of done computer science and not maths haha !!!

Danwilliams1989 02-20-2018 12:33 PM

Tell me a bit about what freebsd and openbsd is and what the difference is. I can’t quite wrap my head around it. Is it another Linux distro?

Trihexagonal 02-20-2018 12:43 PM

Quote:

Originally Posted by Danwilliams1989 (Post 5822092)
Wow really you sound like a pro lol.

To me anyway.

No. I'm just some guy sitting at home with 7 laptops running BSD.


Quote:

Originally Posted by Danwilliams1989 (Post 5822092)
I don’t mean to be funny but if you don’t ask for help when your stuck how are you supposed to get better. I’m sure I’ll pick it up in no time. I liked the look of Ubuntu. So I went with that just bought myself a book now to start with the basics. Going to take some classes on Lynda.com and do some research on the web. Have no idea what I’m doing haha.

I read. A lot. Incessantly and obsessively for 2 years or so. The best way to know how to defend yourself from exploit is to know how they are carried out.


FreeBSD and OpenBSD are not Linux distros. They can trace their roots back to UNIX proper. Think Gentoo as far as setting up FreeBSD. You start with the base system and a terminal and build your 3rd party apps and GUI from there. If you look in my profile I have a link to my site with a tutorial on how to set up a FreeBSD desktop from scratch.

You're honestly better off at this point sticking with Linux.

Danwilliams1989 02-20-2018 01:42 PM

Wow I’ll deffo check it out is it okay if I add you?

ondoho 02-20-2018 01:45 PM

maybe if there was a better description of what "BT 6A" is, we could get more and better feedback?
is it some sort of router distributed by british telecom?

Danwilliams1989 02-20-2018 01:54 PM

Yeah that’s all I can give you sorry. It’s a standard one from the ISP.

dave@burn-it.co.uk 02-21-2018 11:12 AM

Many newer BT routers reserve a portion of their potential bandwidth for public access. It is part of your agreement when you signed up for their service. The public access portion uses a different SSID and is isolated from the private side.
It is the way that BT attempt to supply their full public WIFI service.


All times are GMT -5. The time now is 08:18 AM.