Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 61 guests and 1 member online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
General Certification
Networking
Rouge Wireless Router
EH-Net
May 24, 2013, 06:03:03 AM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
General Certification
>
Networking
(Moderator:
don
) >
Rouge Wireless Router
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: Rouge Wireless Router (Read 6139 times)
0 Members and 1 Guest are viewing this topic.
Svenxix
Newbie
Offline
Posts: 17
Rouge Wireless Router
«
on:
January 04, 2012, 06:11:31 PM »
I'm living in an apartment complex, and I think someone plugged one of the internal LAN ports into their internet jack. The point is that I'm getting assigned a 192.168.0.x address when I plug directly into the wall.
By taking my browser to 192.168.0.1 I can get to a D-Link admin page.
I was wondering what the security implications of that are.
Is there a way to get a valid IP address from my ISP without modifying the router? Is there a way to help others get the real IP addresses without modifying the rouge router?
Also, I can access the internet fine from my wireless router that is plugged into the wall. Is there a reason that my wireless router is getting a good IP address and I'm not?
Thanks
Logged
hayabusa
Hero Member
Offline
Posts: 1633
Re: Rouge Wireless Router
«
Reply #1 on:
January 04, 2012, 07:45:09 PM »
Sounds to me like the router is 'supposed' to be the gateway for your building / complex... More or less, if you aren't paying for individual internet service, then that 192.168.0.x address is likely the NAT'd internal address, assigned via DHCP, from the gateway. Unless they put a machine (one, as it can't do multiple) in the DMZ on the router, nobody will have a 'public' IP address.
Edit: if anyone else sees that rogue router, then it sounds like the building isn't wired right, as each should have their own dedicated connection to the ISP.
«
Last Edit: January 04, 2012, 07:46:48 PM by hayabusa
»
Logged
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH
chrisj
Hero Member
Offline
Posts: 1163
Re: Rouge Wireless Router
«
Reply #2 on:
January 04, 2012, 10:40:58 PM »
When I was looking at apartments last year, a few I looked at provided internet and cable. they were a little tired of dealing with comcast and the like due to complaints. Units would have ether net jacks and coax outlets.
To me it sounds like that might be the case where you are. the best thing to do would be double check with management to see if that's the case.
Logged
OSWP, Sec+
ajohnson
Recruiters
Hero Member
Offline
Posts: 1060
aka dynamik
Re: Rouge Wireless Router
«
Reply #3 on:
January 05, 2012, 07:14:53 AM »
Sounds like it's time to fire up a packet capture and see what's really going on
Logged
WIP: GCFA |
www.infosiege.net
| @infosiege
The day you stop learning is the day you start becoming obsolete.
3xban
Hero Member
Offline
Posts: 608
Re: Rouge Wireless Router
«
Reply #4 on:
January 05, 2012, 07:53:27 AM »
Going to agree with Chrisj on this as well. Unless you are paying your cable or phone company directly, then you are most likely using shared internet through the building. In which case I would treat the network as unknown and potentially hostile since you do not have control of what other tenants will do. If you are paying for cable/dsl internet to the companies directly then ensure that you have your equipment setup correctly. Don't plug into the ethernet wall jacks since those may have been left as an option if you didn't want to pay separately for internet.
You should definitely be using your own router to better protect your systems from the rest of the tenants. Ensure your wireless network is properly secure as well. Gotta love pulling up the Wi-Fi sniffing software in dense areas of population.
Logged
Certs: GCWN
(@)Dewser
chrisj
Hero Member
Offline
Posts: 1163
Re: Rouge Wireless Router
«
Reply #5 on:
January 05, 2012, 01:45:10 PM »
Quote from: dynamik on January 05, 2012, 07:14:53 AM
Sounds like it's time to fire up a packet capture and see what's really going on
While I like that idea, that's a very dark shade of gray where the law might come in. Now, nothing stopping you from seeing what is COMING to your system. But Bob accidentally setting your interface to promiscuous may get you in legal trouble.
Logged
OSWP, Sec+
ajohnson
Recruiters
Hero Member
Offline
Posts: 1060
aka dynamik
Re: Rouge Wireless Router
«
Reply #6 on:
January 05, 2012, 04:11:26 PM »
Quote from: chrisj on January 05, 2012, 01:45:10 PM
While I like that idea, that's a very dark shade of gray where the law might come in. Now, nothing stopping you from seeing what is COMING to your system. But Bob accidentally setting your interface to promiscuous may get you in legal trouble.
You think it's illegal to passively observe traffic on a network port in an apartment you're renting. Can you cite any precedence for this? I can recall several research publishing information about what they've found on connections that used shared mediums at hotels, conferences, etc.
IANAL, but that doesn't sound like a very dark shade of gray. I think it's fair to review your connection prior to connecting any important systems to it. If you started capturing passwords, ARP poisoning, scanning other systems, etc., then you would probably be crossing the legal/ethical boundary.
I personally wouldn't have any ethical issues with determining whether I'm on a shared medium or some other horrible configuration; I think it would be foolish not to. Even in such a scenario, you wouldn't need to actually capture packets or dig into the actual data; it would be obvious just from observing header information in real-time.
Logged
WIP: GCFA |
www.infosiege.net
| @infosiege
The day you stop learning is the day you start becoming obsolete.
WCNA
Full Member
Offline
Posts: 187
Re: Rouge Wireless Router
«
Reply #7 on:
January 05, 2012, 09:21:24 PM »
OK here's the deal. Residents plugging in a LAN port on their wireless router into the internet wall jack (supplied by the complex) used to be the bane of my existence in my former job. I used to hunt them down daily.
You first need to know what the correct address scheme is for the internet provided by the complex. Frequently they will use something different than the 192.168.x.x network most home wireless routers use. If
your
wireless router is working, it is probably due to it still holding on to a correct address. Log in to your router and look at the WAN address from your ISP.
You can usually statically assign yourself an address (after ping sweeping the space to make sure you don't use an address already in use) if you keep receiving an incorrect address from the rogue router.
If you really want to, you could check out my video on dhcdrop on securitytube.net. It will use up all the addresses from the rogue router, making it more likely for you and others to receive a correct DHCP address.
OR you could just inform your ISP and if they are worth a damn, they'll come out, track down the offender and disconnect them. Also, if they have left the password as default (as these kind of people usually do), you could log in to the D-link and turn off DHCP. I used to walk people through doing this over the phone to prevent a truck roll. Legal? It was for us because we were the ISP and they were breaking their TOS.
«
Last Edit: January 05, 2012, 09:25:56 PM by WCNA
»
Logged
ISC2 Associate, WCNA, CWNA, OSCP, Network+
chrisj
Hero Member
Offline
Posts: 1163
Re: Rouge Wireless Router
«
Reply #8 on:
January 05, 2012, 11:14:21 PM »
@dynamik
I talk to my neighbors sometimes. they'll mention tech issues. either fishing to see if anyone else is having the same problem, or just looking to vent and maybe get a solution. none of them as far as I know, know what I do.
However, I could easily see a neighbor getting their underwear in a knot, over even a simple comment about tech, and call the police because the leader of anonymous lives next store.
Guess I'm just getting too paranoid.
As for my comment, I like the idea. doesn't mean I wouldn't or haven't done it. However, I also don't want to have to deal with getting a lawyer that can argue the finer points of computer security if some cop decides I was 'wire tapping'.
Like I said, maybe I'm getting too paranoid.
Logged
OSWP, Sec+
ajohnson
Recruiters
Hero Member
Offline
Posts: 1060
aka dynamik
Re: Rouge Wireless Router
«
Reply #9 on:
January 08, 2012, 08:35:26 AM »
Yea, I get the point you're making. It's not that it's actually illegal; it's that people don't understand and will freak out. You just want to avoid a hassle. It's the same reason I'd never go tell a neighbor that their wifi is insecure and that I could theoretically see everything they're doing. I totally agree.
Logged
WIP: GCFA |
www.infosiege.net
| @infosiege
The day you stop learning is the day you start becoming obsolete.
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
News Items and General Discussion About EH-Net
: ÌÀÃÀÇÈÍ ÌÎÄÍÎÉ ÎÄÅÆÄÛ APPLE-FASHION!
(0) by
Infabeemace
News Items and General Discussion About EH-Net
: When your benjamin will be to your own car and truck clean up
(0) by
areluctes
Network Pen Testing
: Want a challenge? Want a GXPN practice exam?
(0) by
ajohnson
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(8) by
ajohnson
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(29) by
ajohnson
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(1) by
prats84
Greetings
: Hi from the UK
(4) by
MrTuxracer
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
Free Business and Tech Magazines and eBooks
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.