Anatomy of a target: how a router ends up on the access market, and how to defend it. A four-part lab mini-series, one episode every Saturday morning.
What is the series about?
Dark web markets do not only sell stolen data: they also sell accesses, meaning the ability to enter a network. A router with exposed management, a password already found in a breach list, or a RouterOS version that has never been updated becomes merchandise. The series starts there, but it does not stop at the story: each episode leads to the configuration that makes the difference.
The episodes
- Episode 1Dark web and RouterOS: how a router ends up in the access marketSaturday 7 November, 10:00 is out
- Episode 2Dark web and RouterOS: OSINT, your router seen from outsideSaturday 14 November, 10:00 is out
- Episode 3Dark web and RouterOS: anatomy of a compromised router (and the script that unmasks it)Saturday 21 November, 10:00 is out
- Episode 4Dark web and RouterOS: clean doesn’t mean hardened (detection and operational hardening)Saturday 28 November, 10:00 is out
Where do I start?
Start with the first episode, which explains the mechanism. If your router is exposed to the Internet, in the meantime start from the basics: the howto Basic hardening of a MikroTik router and the check Has your password been stolen?.
Frequently asked questions
When are the episodes released?
One per week, on Saturday morning at 10:00. This page updates itself: released episodes have the link, scheduled ones show the date.
Does the series teach how to attack a router?
No. The dark web and the lab compromise are used to understand how an attacker thinks; the goal of each episode is to recognize the signs and close the doors. Tests are performed on lab routers, never on other people’s devices.
Do I need to be a dojo member?
Lab tests are available as a preview for dojo students and then become public. Joining the dojo is free.