Slashdot Mirror
Detecting 802.11 Discovery Apps
Joshua Wright writes "I have written a white paper on detecting 802.11 Wireless LAN Network Discovery applications.
Wireless LAN discovery through the use of applications such as NetStumbler, DStumbler, Wellenreiter and others is an increasingly
popular technique for network penetration. The discovery of a wireless LAN might be used for seemingly innocuous Internet access, or to be used as a "backdoor" into a network to stage an attack. This paper reviews some of the tactics used in wireless LAN network discovery and attempts to identify some of the fingerprints left by wireless LAN discovery applications, focusing on the MAC and LLC layers. This fingerprint information can then be incorporated into intrusion detection tools capable of analyzing data-link layer traffic.
"
...in their detecting detectors?, or are the detectors detecting only getting detecteed once? anyway you put it that's a lot of detecting detectors and vise versa...
My girlfriend gets pissed anytime I even mention backdoor penetration...
I just tend to look for the box on the wall plugged into an ethernet cable with the two antennae sticking out of it.
God damn, I love a good arms race.
Are you a coder? Need work? Get involved at the beginning of an arms race such as this one. Employment for years and years. Get involved early enough, and soon you will be an "expert".
Of course, there are more employent opportunities on the defensive side of the race, while the more fun side is the offense.
OK, here's another arms race.
- With this anti-missile missile, we can intercept their missiles!
* But what do we do if they build an anti-anti-missile-missile missile?
- Simple, we build and anti-anti-anti-missile-missile-missile missile.
* Ow...I have a headache.
Please correct me if I got my facts wrong.
Rejoice and make war your life:
See Naqoyqatsi
(Na-qoy-qatsi: (nah koy' kahtsee) N. From the Hopi Language.
1. A life of killing each other. 2. War as a way of life. 3.
(Interpreted) Civilized violence.
This whitepaper is published in PDF format, so it must be serious! Unlike those HTML white papers written by script kiddies....
What do you do now?
Go outside and kick ass on the guy with the laptop?
You could sneak up behind him and strangle him with all that extra cat-5 you have lying around now.
That's funny, I'm working on a similar whitepaper: Detecting 802.11 Detector Detectors, to detect people trying to detect people trying to detect 802.11 networks. Including is some sample code to detect the detector detectors, but it seems to get into a nasty infinite loop, and I can't figure out why.
________________________________________________
suwain_2
well u could remove the threat completely with the help of a three letter friend.
Large print giveth, and the small print taketh away
Mirror Hotmail and Yahoo's login pages on a local server and collect passwords. Write 'creative' emails on their behalf to their friends and parents and (potential) employers.
Rewrite stock quotes on the fly...
Write a perl script that will rewrite outgoing POP emails
(s/Regards,/I love you,/g is an old favorite of mine...)
I figure if someone uses my network without asking for permission, I have the right to make them look like an idiot.
Cheers,
Jim
-- My Weblog.
If you don't want some joe schmoe stealing bandwidth. thank god to the prolly near infinite layers of lead paint (and any other factors) under all the decent paint on my old victorian house. Makes signals so weak outside you have to be about 3 feet from the outside walls just to do anything. So if some unknown is on my lan, he's prolly in my lawn too......sprinkler time hehehehe....im a total bastidge.
> wouldn't it be cool if you could walk down the street and stay connected to icq without getting your ass kicked?
That would be pretty cool, even without ICQ.