Thread: Hacking BB account !!!

In an orkut community one fellow claims that he has hacked the user id and passwords of many BSNL BB users through "port scanning".But luckly he don't know how to use the same (he was asking help).
Can any one throw some light on "port scanning"??
Is it really possible?? If so, how can we protect our account???
I dont think changing password frequently is a good option.

I am not too sure about how this thing works but as Bsnl broadband can now be only used from the land line number which is tagged along with your user id in other words port binding.

The best thing to do to stay away from over billing due to some one hacking your account and using it somehow is to get an unlimited connection.

bro anything is possible in this computer sh** world even your home address can be tracked without any problem so passwords are just ...............

and abt port scanning i dont have any idea about this! let us see what other senor members have to say on this, as this website do not offer help on how to hack BB passwords

While checking the usage in BB usage portal, frequently it is showing some other user's usage details with his/her user id and tele no. If the account is port bounded then how it happens?

Originally Posted by sujithsukrutham

While checking the usage in BB usage portal, frequently it is showing some other user's usage details with his/her user id and tele no. If the account is port bounded then how it happens?

With BSNL nething is possible...Today i.e 12-7-08 when i was checking my usage it is showing my usage of 17th July...

well kinda possible.. especially with airtel connections..many routers have remote administration enabled , and almost all routers are accessible from the internet via telnet.. so all a guy needs to do is randomly pick up an ip and just telnet it or do a http://x.x.x.x and if he is lucky he would be able to communicate with a modem... and once you do so, your done.. cause 99.99% of the people do not change their default router password which is BAD!!!so they enter the default user id and password and then enter your modem config .. then go to WAN config and go to vpi/vci 0/35 and you would find the username and password.. password in most cases is default one given by bsnl and can be cracked.. even if it has changed there is a way by viewing source code of the html page..
MORAL OF THE STORY : Change default password of router and disable remote administration and if possible remote telnet access.. change default bsnl password.. etc..

Well Heres A Lowdown ON Port Scanning from about.com

This is the link... u may go through this article... but dont attempt anything unless u know what u r doing!!

http://netsecurity.about.com/cs/hackertools/a/aa121303.htm

superprash2003's post is good...
yea, even I think its possible to do so...

because, i have seen a port scanning software, which scans all the computers in your region. and it also gives router addresses of only some routers... donno why exactly.

but, i have seen all that in the internet i used with cable. i mean, local broadband... but , i am not sure, if this is possible with BSNL broadband.

but, hearing to what superprash2003 said, thats understandable that its very much possible these days.

lets see if someone can give a better answer...

bsnl router page opens if u just type his ip from ur browser



and to find an ip of the users nearby is possible by that port scanning or somthin else,,,,


most of the foolish users use "password" as default password,, and we can see the user names above,,,


configure ur router with the following accounts u get by searchin,,, thats it done

But with the bsnl telephone exchange which has port binding option, you cannot actually hack such accounts, as they are programmed to work only with the phone number which was alloted to it.

Originally Posted by xwhyz

but with the bsnl telephone exchange which has port binding option, you cannot actually hack such accounts, as they are programmed to work only with the phone number which was alloted to it.

which happens to be very correct my friend!! With port binding it wont work.

The subject which sujith is talking about... I m 100% sure its possible with cable internet only.

in some areas there is no port binding..although yes that is a restriction

Originally Posted by superprash2003

in some areas there is no port binding..although yes that is a restriction

most areas portbinding is not done yet,, i use my personal account from my friends and cousins hom,, and from chennai and rajasthaan i think thers no binding for port,, coz usernames and pasworrds leaks mostly from them

BSNL BB accounts are port binded as said by Admin. So it is difficult to use the username and password to other phone number to which the account is not binded.

sorry

this is not allowed

you are putting sensitive info of other ppls account
please remove this asap

i agree with gardencityboy its not fair to post that data , you should be sorry for that for what you have done if i were the admin/mod here i would have already warned you!!

actually bsnl is very bad. sometimes when i enter my portal id and password it shows some other users account.

isn't there a way u could penalise the hackers?
doesn't bsnl have enough resources to set up a cell to prevent these type of hacking?

hey comon dont be that hard on me,all the passwords i gave out were port binded so no problem there.i just wanted to prove that if i could do it,some 1 with real bad intensions could easily take advantage of this weak spot.my suggestion to BSNL ppl is at the time of modem installation,tell the customer to change the router password from admin.

so you were trying to prove yourself that what you can do huh!!

hehe spot on

i thought only the older connections with 59 series ip,s were vunerable..that i tried about 2 years ago.. it has been a long time ive tried it. i dont think the 117 series ip,s are succeptable.. but i havnt scanned any .. jst a thought

the main point is many 117.x.x.x IP addresses are port binded meaning even if you do manage to find out username/passwords for such accounts it is useless because you can't use those accounts on any other line except their own.