Checking out my D-Link DIR655

I was bored and I decided to poke around with my new router. I found a couple cool things.

Through a portscan I found it has a few ports open.

80  for the web interface. Telnet gets you this:

telnet 192.168.2.1 80
Trying 192.168.2.1…
Connected to 192.168.2.1.
Escape character is ‘^]’.

HTTP/1.0 400 Bad Request
Cache-control: no-cache
Server: Ubicom/1.1
Content-Length: 11
Connection: close

Bad RequestHTTP/1.1 500 Server Error

Connection: close
Connection closed by foreign host.

4444 returns xml 500 type error from browser, spits out this from telnet

telnet 192.168.2.1 4444
Trying 192.168.2.1…
Connected to 192.168.2.1.
Escape character is ‘^]’.

HTTP/1.1 500 Internal Server Error
SERVER: ipOS/7.4 UPnP/1.0 ipUPnP/1.0
EXT:
Connection: close

<?xml version=”1.0″ encoding=”UTF-8″ standalone=”yes”?><soap:Envelope xmlns:soap=”http://schemas.xmlsoap.org/soap/envelope/” soap:encodingStyle=”http://schemas.xmlsoap.org/soap/encoding/”><soap:Body><soap:Fault><faultcode>s:Client</faultcode><faultstring>UPnPError</faultstring><detail><UPnPError xmlns=”urn:schemas-upnp-org:control-1-0″><errorCode>500</errorCode><errorDescription>Internal Server Error</errorDescription></UPnPError></detail></soap:Fault></soap:Body></soap:Envelope>HTTP/1.1 500 Server Error

Connection: close
Connection closed by foreign host.

9393 doesn’t connect from browser, telnet returns

HTTP/1.1 501 Internal Server Error
SERVER: ipOS/7.4 UPnP/1.0 ipGENADevice/1.0

8099 looks like its trying to be helpful in a browser spits out XML that links to Cisco’s site. Kinda odd.

<soap:Envelope soap:encodingStyle=”http://schemas.xmlsoap.org/soap/encoding/”>
−
<soap:Body>
−
<GetDeviceSettingsResponse>
<GetDeviceSettingsResult>OK</GetDeviceSettingsResult>
<Type>GatewayWithWiFi</Type>
<DeviceName>D-Link Systems DIR-655</DeviceName>
<VendorName>D-Link Systems</VendorName>
<ModelDescription>Xtreme N GIGABIT Router</ModelDescription>
<ModelName>DIR-655 A3</ModelName>
<FirmwareVersion>1.11, 2007/12/05</FirmwareVersion>
<PresentationURL>/Status/Device_Info.shtml</PresentationURL>
−
<SOAPActions>
<string>http://purenetworks.com/HNAP1/GetDeviceSettings</string>
<string>http://purenetworks.com/HNAP1/SetDeviceSettings</string>
<string>http://purenetworks.com/HNAP1/GetWanSettings</string>
<string>http://purenetworks.com/HNAP1/SetWanSettings</string>
<string>http://purenetworks.com/HNAP1/GetWanStatus</string>
<string>http://purenetworks.com/HNAP1/IsDeviceReady</string>
<string>http://purenetworks.com/HNAP1/Reboot</string>
<string>http://purenetworks.com/HNAP1/AddPortMapping</string>
<string>http://purenetworks.com/HNAP1/DeletePortMapping</string>
<string>http://purenetworks.com/HNAP1/GetPortMappings</string>
<string>http://purenetworks.com/HNAP1/GetMACFilters2</string>
<string>http://purenetworks.com/HNAP1/SetMACFilters2</string>
<string>http://purenetworks.com/HNAP1/GetRouterLanSettings</string>
<string>http://purenetworks.com/HNAP1/SetRouterLanSettings</string>
<string>http://purenetworks.com/HNAP1/GetConnectedDevices</string>
<string>http://purenetworks.com/HNAP1/GetNetworkStats</string>
<string>http://purenetworks.com/HNAP1/GetWLanSettings24</string>
<string>http://purenetworks.com/HNAP1/SetWLanSettings24</string>
<string>http://purenetworks.com/HNAP1/GetWLanSecurity</string>
<string>http://purenetworks.com/HNAP1/SetWLanSecurity</string>
</SOAPActions>
<SubDeviceURLs/>
−
<Tasks>
−
<TaskExtension>
<Name>Wireless Settings</Name>
<URL>/Basic/Wireless.shtml</URL>
<Type>Browser</Type>
</TaskExtension>
−
<TaskExtension>
<Name>Block Network Access</Name>
<URL>/Advanced/MAC_Address_Filter.shtml</URL>
<Type>Browser</Type>
</TaskExtension>
−
<TaskExtension>
<Name>Parental Controls</Name>
<URL>/Advanced/Access_Control.shtml</URL>
<Type>Browser</Type>
</TaskExtension>
−
<TaskExtension>
<Name>D-Link Tech Support</Name>
−
<URL>

http://support.dlink.com/products/view.asp?productid=DIR%2D655

</URL>
<Type>Browser</Type>
</TaskExtension>
−
<TaskExtension>
<Name>Reboot Router</Name>
<URL>/Tools/System.shtml</URL>
<Type>Silent</Type>
</TaskExtension>
</Tasks>
</GetDeviceSettingsResponse>
</soap:Body>
</soap:Envelope>

This leaves me with a couple questions. What is ipOS/7.4, is this thing running linux? Seems to be with the php based index page.

Ubicom/1.1 is apperantly the OS it is running. Wheather or not its LInux is yet to me known by me. Oh well… That was kinda fun.