Anti Hack Exploit (user.dat)
The old Winbox hole (RouterOS before 6.42.1) let attackers read user.dat. Closes Winbox to the internet, lists users to check, and tells you if the version is old.
1 Settings
2 Script
Fill in the settings and press Make script. The script shows here, ready to copy.