MKBRUTUS is a tool developed in Python 3 that performs bruteforce attacks (dictionary-based) systems against RouterOS (ver. It is possible that in the midst of a pentesting project, you can find the ports 8291/TCP (Winbox) and 8728/TCP (API) open and here we have a new attack vector.īecause the port 8291/TCP is only possible to authenticate using the Winbox tool (at least by now ), we realized the need of develop a tool to perform dictionary-based attacks over the API port (8728/TCP), in order to allow the pentester to have another option to try to gain access. Many network sysadmins choose to close Telnet, SSH and HTTP ports, leaving the Winbox port open for graphical management or to another client (developed by third parties) which uses the RouterOS API port, such as applications for Android (managing routers and Hotspots) or web front-ends.Īt this point, MKBRUTUS comes into play )īoth, Winbox and API ports uses a RouterOS proprietary protocol to 'talk' with management clients. This system can be managed by the following ways: RouterOS can be also installed on other devices such as PC. Many companies choose them as they are a great combination of low-cost and good performance.

Mikrotik brand devices ( which runs the RouterOS operative system, are worldwide known and popular with a high networking market penetration. Ramiro Caire - email: / Twitter: Massa - email: / Twitter: MOTIVATION & SCENARIO

Mikrotik swos winbox