Firmware Defaults
Default passwords, UPnP, and firmware age — fix on YOUR lab device only.
Visual · firmware_defaults
Firmware defaults literacy. YOUR lab router. Original Cyberlium.
admin/admin survived shipping — defenders kill defaults on gear they own.
Network devices ship with default credentials, open UPnP, outdated firmware, and enabled WPS on Wi-Fi gear. Defenders change defaults, disable risky features, and schedule firmware updates on hardware they administer. Cyberlium teaches a defaults checklist on YOUR lab router — not password-spraying neighbor admin panels or 'updating' café firmware. Next: Device Lab.
1. Default credentials and UPnP
Document whether default admin password was changed and whether UPnP is enabled on YOUR lab device. UPnP often punches unexpected holes through NAT.
Testing default passwords against stranger routers is a crime — not a lab.
Command guide
Try these commands — Default credentials and UPnP
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Firmware updates — https://www.cisa.gov/known-exploited-vulnerabilities-catalog CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
nmap -sV -p 22,23,80,443 192.168.1.1 2>/dev/null | head -15 || echo 'Check for telnet/defaults on YOUR lab router' grep -iE 'default|admin|password' "$HOME/cyberlium-lab/t16-defense/roe.txt" 2>/dev/null || echo 'Change defaults on gear YOU control'
Primary tools to practice this lesson: nmap, grep. Reference sites: Firmware updates (https://www.cisa.gov/known-exploited-vulnerabilities-catalog); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Firmware currency
Record current firmware version and last check date. Plan updates on lab hardware you can recover if flash fails.
Never flash firmware on ISP CPE you do not own — bricks affect service for others.
3. Wi-Fi defaults on lab AP
WPS, guest network isolation, and default SSIDs matter on YOUR lab AP segment. Read settings; optional harden on disposable gear only.
Ship: defaults checklist status for lab device. Next: Device Lab.
4. What you ship: firmware defaults checklist for lab device
Default password changed, UPnP state, firmware version, WPS readout. YOUR device. chmod 600.
5. What you record before the next lesson
Date. Defaults checklist on lab router. File t16-m04-l03-firmware-defaults.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Try admin/admin on every gateway on the subnet. Flash café router 'to patch CVE.'
- Right: Complete defaults checklist on YOUR lab device. Next: Device Lab.
Mission: defaults checklist
1) Verify default admin password changed on lab device. 2) Record UPnP and firmware version. 3) Note WPS status if Wi-Fi lab gear. Never test defaults on stranger devices.
Stuck? Ask Cyberlium AI Mentor
Firmware update failure plan: know how to TFTP recover YOUR lab unit — not neighbor's.
APPLY: Default admin credentials on network gear:
APPLY: True or False: UPnP enabled is always harmless.
APPLY: Testing admin/admin on dorm gateways: