- #Reaver loses wireless mac address for free#
- #Reaver loses wireless mac address install#
- #Reaver loses wireless mac address drivers#
The first step in mounting an attack on a WiFi router is to identify the target's MAC address. With libcap configured, Reaver compiled without a hitch, and it was time to start beating on the door.
#Reaver loses wireless mac address install#
In order to compile Reaver, I also had to install libpcap, the network traffic capture library, through Ubuntu's Software Center. Advertisementįor my attack platform, I used an aging Toshiba Satellite A135 running Ubuntu 11.10. Normally, to get the PIN, you'd need to have physical access to the router. The PIN for the router is printed on the bottom, along with its MAC address in WPS mode, a computer can use that PIN to retrieve the network configuration information without the user having to worry about remembering a long password or otherwise mess with the router's administrative interface. My target was a Cisco Linksys WRT54G2 Wireless-G Broadband Router, an older but fairly common residential WiFi router. The only way to block the attack was to turn on Media Access Control (MAC) address filtering to block unwanted hardware.
As it turns out, it's a pretty big one-even with WPS allegedly turned off on a target router, I was able to get it to cough up the SSID and password. To find out just how big the hole was, I downloaded and compiled Reaver for a bit of New Years geek fun. On December 28, Craig Heffner of Tactical Network Solutions released an open-source version of an attack tool, named Reaver, that exploits the vulnerability. The structure of the WPS PIN number and a flaw in the protocol's response to invalid requests make attacking WPS relatively simple compared to cracking a WiFi Protected Access (WPA or WPA2) password. WPS lets users enter a personal identification number that is hard-coded into the access point in order to quickly connect a computer or other wireless device to the network. Last week, security researchers revealed a vulnerability in WiFi Protected Setup, an optional device configuration protocol for wireless access points.
#Reaver loses wireless mac address for free#
Fortunately (or unfortunately, if you're the one looking for free WiFi), those more blatant security holes are going away through attrition as people upgrade to newer routers or network administrators hunt down vulnerabilities and stomp them out.
#Reaver loses wireless mac address drivers#
And there are plenty of targets out there for would-be hackers and war drivers to go after-just launch a WiFi scanner app in any residential neighborhood or office complex, and you're bound to find an access point that's either wide open or protected by weak encryption. WiFi hacking has long been a favorite pastime of hackers, penetration testers, and people too cheap to pay for their own Internet connection.
0 kommentar(er)
