Re: How to track down a wireless hacker

Hello,

He may also just bought a PCMCIA or usb wifi network card in any shop (without any track then).
If you have the mac address, you may try to identify the manufacturer:
http://coffer.com/mac_find/

How do they know they were hacked ? Do you know what interest the hacker ?
You may set up a trap, with honeypot & co to collect data. He may be enough confident to retrieve pop3 mail or any thing cleartext that help identify.

Port mirroring may help to collect data.


Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


----- Original Message ----- From: "jond" <x@xxxxxxxx>
To: <pen-test@xxxxxxxxxxxxxxxxx>
Sent: Wednesday, November 07, 2007 1:27 AM
Subject: How to track down a wireless hacker


I have a new client who was setup with a wireless network a while back
using WPA encryption by another firm.
An 'unauthorized user' broke the encryption and got onto their network.
They've come to me to design a solution so that this doesn't happen
again, which isn't a problem.


However they also asked me if it's possible to track down the attacker
if this happened again.
From what I know, it's not possible is it?

If the attacker didn't change their MAC address, and say the companies
lawyers could get some sort of court order to intel, dell, etc to
release which MAC address went to which computer and who bought said
computer. Does the manufacture even keep that info?

If the attacker did change their MAC address, the real MAC address
will never transverse the wire(AIR) right, or is it still in the
packet somewhere?

Any other thoughts or ideas to track someone down?
Is any other info leaked that I'm not thinking about?





Thanks,
Jon

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------





------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Whats the Best Laptop
    ... My son bought a two year old Mac two years ago the same day I bought my new n5445 HP, in April I bought a new HP dv6255us dual core, light scribe web cam etc with the bells and vistas, the Mac is still going strong and I hate Vista and MS the wife got a gateway with XP Media Edition which so far has not given her any trouble, my new HP on the other hand well let's say I am going to have a boat load of money to replace my old SW with "new" of what I already own SW wise. ... I guess if your in the music business Apple has an edge over MS even though they are a ton of MS programs to buy, but as always the hardware has drivers that don't like other drivers intruding on their RAM and HD space. ...
    (alt.guitar.beginner)
  • Re: Slightly off-the-wall idea for getting a new Mac...
    ... Maybe that why I have never 'bought' a RTR one then! ... Although my G5 doesn't hold a candle to even the slowest Mac now, ... What does that actually mean though please Andy? ... I mean, I have built ...
    (uk.comp.sys.mac)
  • Re: Google
    ... also on Mac. ... Not seamless though - records as an aiff file and then you have to ... And now Himself has bought a proper turntable (a Rega, ... "This might as well say "bing tiddle tiddle bong". ...
    (rec.arts.sf.fandom)
  • Re: who is to blame?
    ... I bought myself a PPC and... ... the mac is so much better that I now ask myself why didn't I find out about mac earlier? ... I care about which is the best OS for me to do my everyday work efficiently and smoothly. ... Is your beef with the fact that Apple has a minuscule market share? ...
    (comp.sys.mac.advocacy)
  • Switched to Mac and HATING IT!
    ... I bought a G5 iMac 2 weeks before the Dual Core were introduced. ... It sees it in the Canon software, ... changing USB ports. ... cohisive functionaning system than the Mac, ...
    (comp.sys.mac.misc)