Help with Mirai

@punish3r said:
So, i have to try the basic 60 usernames and passwords used by mirai to bruteforce the SSH…

Right…??
you are close. try :slight_smile:

@3mrgnc3 said:
Nobody said that. What was that mirai list made up of? What is the logic behind how Mirai spreads? Can you apply that same logic here?

That list was made of 60 default usernames and passwords used by devices.
Mirai scanned the IOT devices find open ports adn try to bruteforce them using the pre caluclated table of usernames and passwords.

@5am said:

@punish3r said:
So, i have to try the basic 60 usernames and passwords used by mirai to bruteforce the SSH…

Right…??
you are close. try :slight_smile:

I have tried to bruteforce but its not working…

You don’t need to brute force. Just google it

How did Mirai spread? What was in that list it used?

@3mrgnc3 said:
You don’t need to brute force. Just google it

@3mrgnc3 said:
You don’t need to brute force. Just google it

Google what…?

@3mrgnc3 said:
How did Mirai spread? What was in that list it used?

Usernames and passwords…

@punish3r said:

@3mrgnc3 said:
How did Mirai spread? What was in that list it used?

Usernames and passwords…

Default usernames and password of devices

what you use to logon… the way Mirai would… if it was in its list…

Buddy, you must be way overthinking this or just tired. :wink:

Correct me if i am wrong…!!

The mirai had a computed list of devices with their default usernames and passwords, whenever it scanned a new device it will try to login using the default credentials.

dont use list, use dafault for platform hardware

@5am said:
dont use list, use dafault for platform hardware

Thanks man…

But didnt the mirai list also has the default credentials for devices…??

to be honest, you dont even need the mirai list of credentials. simple googling for defaults after you recongnize the device works.

@swatcat91 said:
to be honest, you dont even need the mirai list of credentials. simple googling for defaults after you recongnize the device works.

Done that…

Now working on recovering the deleted files.

Any hint on that… tried googling but it gives all the third party tools for that

@swatcat91 said:
to be honest, you dont even need the mirai list of credentials. simple googling for defaults after you recongnize the device works.

and you killed it for everyone :frowning:

yeah :blush:

some people are just too lazy to TryHarder and want the answer on a plate.

@3mrgnc3 said:
some people are just too lazy to TryHarder and want the answer on a plate.

agreed, but sometimes you need help to get a clearer picture

@ph3on1x said:

@swatcat91 said:
to be honest, you dont even need the mirai list of credentials. simple googling for defaults after you recongnize the device works.

and you killed it for everyone :frowning:

sorry abt that. I tried editing/deleting my post but the forums doesn’t allow it. will make sure to be more discreet now onwards :frowning:

Type your comment> @punish3r said:

@DBrojangles said:
If you can figure out the OS/device, you’ll know how to move forward

From the UPNP port, it says that its a mobile phone device…

But from the pi-hole admin panel device is a raspberry pi

How did you conclude it was a raspberry pi? The Dashboard shows nothing.