Rogue AP Wireless on Windows/Linux

szynkro_at_gmail.com
Date: 04/08/05

  • Next message: Ernest Nelson: "RE: sql injection with order by" 
    Date: Fri, 8 Apr 2005 19:52:47 +0200
To: pen-test@securityfocus.com

    Hi,

    I'm looking for a way/all in one tool to simulate a wireless Access
    Point on a Windows XP and/or Linux system preferably with built-in
    DHCP daemon and all.
    The goal is to see if we can trick wireless clients in connecting to
    the AP, sniffing for potential credentials and other interesting stuff
    etc...

    I've heard about hotspotter, airsnarf and alikes but don't know if
    they are valid...

    The scenario would be sniffing the unknown wireless network for valid
    SSID's and setting the SSID on the rogue AP.... then fingers crossed I
    guess that signal is strong enough to get some clients connecting. Can
    we force/help the client in associating with the rogue AP?

    Anyone some other valid (recent) Wireless Pen-Test scenario's?

    thanks

  • Next message: Ernest Nelson: "RE: sql injection with order by"

    Relevant Pages

    • Re: Wireless Routers and Access Points
      ... coverage test results from a number of mainstream commodity wireless routers ... Are there any similar, more recent, reports? ... The big problem with the channel hopping scheme ... wireless clients do this very well. ...
      (alt.internet.wireless)
    • Wireless and Broadcast packets problem
      ... The Issue is that clients connected to the wireless LAN cannot _see_ other clients. ... When running TCPDump on AlbertAP I can see plenty of wireless traffic going around the place. ... I have run tcpdump on both AlbertAP and Sneaky and seem some interesting omissions. ...
      (freebsd-net)
    • Wireless and Broadcast packets problem
      ... I am having a problem with my wireless network. ... clients connected to the wireless LAN cannot _see_ other clients. ... I have run tcpdump on both AlbertAP and Sneaky and seem some interesting ...
      (freebsd-questions)
    • Re: Using DHCP to separate activity?
      ... One of my clients is branch office for a national company. ... The wireless access point does not provide IP addresses. ... DHCP has address reservations matched to the MAC addresses on the ... visitors' laptops and assigns these to a specific range of IPs. ...
      (microsoft.public.windows.server.sbs)
    • Re: Using DHCP to separate activity?
      ... DHCP has address reservations matched to the MAC addresses on the visitors' laptops and assigns these to a specific range of IPs. ... The address range used by the reservation is set up as a Computer Set in ISA Server. ... I have another client that allows limited wireless access to visitors, but the wireless access point is between the firewall appliance and external interface of the SBS box. ... wireless clients must use VPN access if they want into the internal network. ...
      (microsoft.public.windows.server.sbs)