Re: kismet

[Alvin Oga <aoga@mail.Linux-Consulting.com>]

On Wed, 27 Apr 2005, Asem Hassan wrote:

> On Wednesday 27 April 2005 10:39, Alvin Oga wrote:
> > On Wed, 27 Apr 2005, Asem Hassan wrote:

...

> > > Now, I don't know what to do to gain access to the internet through the
> > > detected access points?:scratch:
> >
> > assign a random ip# of theirs to your laptop
> > 	- kismet tells yoou the ip# they are using
> > 	just use that ip# +1 or -1  or +10 or -10
> >
> > restart your network on your laptop
> 
> huh? what about other parameters on the Wireless router ?

if you are running kismet or any other wireless sniffer 

	- you have their ip# of their wireless network
	- you have their essid
	- you can use their wireless gateway ( AP )
	- you have their channel

	- you can use any domain name ... it doesnt matter,
	just like it doesnt matter you call your machine
	anything-you-like.some-whacky-domain.com and it'd still work

	- you don't care about other wireless parameters
		- you don't care about their power parameters
		- you don't care about their nicknames
		- you don't care about their firewall above their wireless
		network .. since you are inside, behind their firewall

		- you don't need an login acct and passwd to
		connect to the wireless ap

		- you don't care that they do not use WEP
		- you probably can't see anything if they were
		using wpa
		
> I don't know if you are joking or not, but what I am trying to do have nothing 
> to do with spamming whatsoever.

try it ( to change your ip# ) and see if you can surf the web
	- if you dont do anything "bad", they will probably never
	notice you are using their network 

- if you are super lucky ... 
	-
	- just run dhcpclient and see that they even give *you* an ip#
	- to use their wireless connections
	-

- there's about 40% - 60% chance that any wireless network is NOT wep
  enabled, just because people goto the local pc store or mail order it
  and turn it on and it magically works and they are happy with
  the factory defaults which leaves the front door wide open for
  the local script kiddie to get free internet access

- and you, the wireless ap owner, have no way to know who used
  your wirless network ... 

- if you can surf the web .. you can certainly send out emails and
  sniff and crack anything else on the internet 

c ya
alvin