Deadpool614
Newbie
 Offline
Posts: 27
He who dares, wins
|
 |
« on: April 06, 2012, 02:54:26 AM » |
|
So a co-worker of mine gave me permission to try to crack his wireless network until my router gets here. so Far I've found his SSID (had it hidden) and thought it would be cake because his network was open. I spoofed his MAC and tried to connect and I wasn't able to. I ran a deauth and still no connection. I'm not sure what I'm missing here. As far as my knowledge goes he's running an open wifi with MAC filtering. I'm fairly sure he's using a dynamic IP config.
Does anyone have any ideas as to what could be holding me up?
|
|
|
|
|
Logged
|
CIO/G-6 C|EH ....Taking the first steps down a long path.
|
|
|
|
|
Deadpool614
Newbie
Offline
Posts: 27
He who dares, wins
|
|
« Reply #2 on: April 06, 2012, 07:40:36 AM » |
|
I'm pretty sure he's not using a password but I won't rule it out. His network is open I just can't connect to him even while spoofing a client MAC.
|
|
|
|
|
Logged
|
CIO/G-6 C|EH ....Taking the first steps down a long path.
|
|
|
|
DragonGorge
|
|
« Reply #3 on: April 06, 2012, 03:20:23 PM » |
|
Could signal strength be an issue?
|
|
|
|
|
Logged
|
|
|
|
Deadpool614
Newbie
Offline
Posts: 27
He who dares, wins
|
|
« Reply #4 on: April 06, 2012, 03:34:26 PM » |
|
I had a fairly good signal, around -31db. I was only about 30-40m away from his AP.
|
|
|
|
|
Logged
|
CIO/G-6 C|EH ....Taking the first steps down a long path.
|
|
|
|
DragonGorge
|
|
« Reply #5 on: April 06, 2012, 04:49:04 PM » |
|
Are you running airodump-ng? That should tell you if he's using WEP, WPA, OPEN...whatever.
|
|
|
|
|
Logged
|
|
|
|
|
WCNA
|
|
« Reply #6 on: April 06, 2012, 06:20:16 PM » |
|
I agree with Dragon. You need to study the legitimate traffic to see what works. Capture the traffic. Packets don't lie.
|
|
|
|
|
Logged
|
ISC2 Associate, WCNA, CWNA, OSCP, Network+
|
|
|
Deadpool614
Newbie
Offline
Posts: 27
He who dares, wins
|
|
« Reply #7 on: April 07, 2012, 12:04:36 AM » |
|
Yes, I ran airodump-ng and filtered it by channel. It comes up as an open network on there. I tried to connect via Wcid as well as using the command line, neither has worked yet. I may go try it again today but I wasn't having much luck. I'm not sure if he even knows why I can't connect. He got the wireless router from a Polish soldier he replaced when he got here.
|
|
|
|
|
Logged
|
CIO/G-6 C|EH ....Taking the first steps down a long path.
|
|
|
|
DragonGorge
|
|
« Reply #8 on: April 07, 2012, 04:12:17 PM » |
|
It might be some incompatibility with your card (Alfa?) and his router? I have an Alfa and while it can see both 2.4 and 5 ghz bands of my dual band router it cannot connect to the 5 ghz band. Maybe his router is using N and your Alfa is b/g only?
The way I see it, if his router is open, i.e no wep/wpa/wpa2, then you should be able to connect with any wireless laptop (providing it's compatible). Try a different wifi card.
|
|
|
|
|
Logged
|
|
|
|
|
hayabusa
|
|
« Reply #9 on: April 07, 2012, 05:58:25 PM » |
|
Something I've seen, working with Linux connecting to some AP's...
Check the adapter's wireless preamble settings, if you can. Sometimes if it's set a certain way, on some cards, they don't like to connect, especially if using DHCP, and when dealing with 'normally' hidden / non-broadcast SSID's.
Used to give me fits, a lot, before I figured that out.
|
|
|
|
|
Logged
|
~ hayabusa ~
"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'
OSCE, OSCP , GPEN, C|EH |
|
|
Deadpool614
Newbie
Offline
Posts: 27
He who dares, wins
|
|
« Reply #10 on: April 07, 2012, 08:15:30 PM » |
|
DragonGorge: I've tried using both my internal (Atheros Ath9k) and a Rosewill USB card with no success.
Hayabusa: I didn't think to check that, I'll have to give it a look. You may have solved my million dollar question lol.
|
|
|
|
|
Logged
|
CIO/G-6 C|EH ....Taking the first steps down a long path.
|
|
|
|
WCNA
|
|
« Reply #11 on: April 23, 2012, 07:38:49 PM » |
|
In your study of the legitimate wireless traffic, was it using dhcp? If he's trying to lock you out, it's possible that he's using dhcp and is only allowing a dhcp range of one address. The packet capture should give you a clear idea of why you can't connect.
|
|
|
|
|
Logged
|
ISC2 Associate, WCNA, CWNA, OSCP, Network+
|
|
|
|
jinwald12
|
|
« Reply #12 on: April 28, 2012, 12:38:59 PM » |
|
or he may have static IPs and have no DHCP what so ever
|
|
|
|
|
Logged
|
where did all the fun go?
|
|
|
|
kerpap
|
|
« Reply #13 on: June 15, 2012, 05:04:29 AM » |
|
I agree about the IP thing.
the router may not issue a new IP address which is why you cant connect. most of the time 192.168.1.0/24 is the network range. try social engineering his ip address from him then use that.
or guess and check. start with .1, .2 etc..
in wcid you can add your own IP address. this has worked for me in the past.
|
|
|
|
|
Logged
|
|
|
|
|
fred
|
|
« Reply #14 on: June 17, 2012, 12:43:04 PM » |
|
I think you have problem with wireless signal because the network sounds open.
|
|
|
|
|
Logged
|
ICS Academy Network Security Certified
|
|
|
|
