One Million ASUS Routers Under Control: Exploiting ASUS DDNS to MITM Admin Credentials - TriangeSnake's Blog

https://blog.trianglesnake.com/2024/10/31/One-Million-ASUS-Routers-Under-Control-Exploiting-ASUS-DDNS-to-MITM-Admin-Credentials/ 

 ASUS Router APP 如何在外網連回家若有開啟DDNS設定，路由器的domain是a+md5(MAC Address).asuscomm.com，手機透過DDNS查詢IP後，再從8443 port連回去。 漏洞domain name 由MAC Address產生Domain name &#x3D; a + md5(MAC Address) + .asuscomm.com因此，只要知道 r