.

cracking a login wireless

<<

bazpaul

Newbie
Newbie

Posts: 1

Joined: Tue Feb 10, 2009 4:16 am

Post Tue Feb 10, 2009 4:21 am

cracking a login wireless

Hi, Im just wondering is it possible to crack wireless where you have to login via a website. Like in a hotel or cafe where they give you a password and the webpage defaults to a login screen.

Thanks!!!
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Feb 10, 2009 9:12 am

Re: cracking a login wireless

Yes. It is based on MAC address, so spoof that, and voila... I think there may be a post or 2 on this forum about that. Let me see if I can find it.

BTW - Being the "Ethical" Hacker Network, you are doing this as part of a pen test with permission from the hotel, right?

Don
CISSP, MCSE, CSTA, Security+ SME
<<

jason

User avatar

Hero Member
Hero Member

Posts: 1013

Joined: Sat Jun 21, 2008 6:23 pm

Location: USA

Post Tue Feb 10, 2009 12:34 pm

Re: cracking a login wireless

Google is your friend. Try something along the lines of 'wireless mac security'.
<<

SynJunkie

Jr. Member
Jr. Member

Posts: 71

Joined: Thu Apr 17, 2008 2:41 pm

Location: UK

Post Tue Feb 10, 2009 5:17 pm

Re: cracking a login wireless

Bazpaul

Not sure if its any use to you but did a blog post on bypassing mac address filtering a while back.

i'm sure there are better guides but it might be of use.

http://synjunkie.blogspot.com/2007/12/b ... ilter.html

Regards

Syn
----------------------------------
http://synjunkie.blogspot.com
<<

jason

User avatar

Hero Member
Hero Member

Posts: 1013

Joined: Sat Jun 21, 2008 6:23 pm

Location: USA

Post Tue Feb 10, 2009 5:38 pm

Re: cracking a login wireless

Nice post Syn. Always helpful to have pretty pictures :)
<<

SynJunkie

Jr. Member
Jr. Member

Posts: 71

Joined: Thu Apr 17, 2008 2:41 pm

Location: UK

Post Tue Feb 10, 2009 6:08 pm

Re: cracking a login wireless

Thanks, i aim to please :-)
----------------------------------
http://synjunkie.blogspot.com
<<

Vertigo

Newbie
Newbie

Posts: 13

Joined: Thu Oct 16, 2008 10:34 am

Post Thu Feb 12, 2009 3:25 am

Re: cracking a login wireless

It not so easy to crack login in some cases... some ISP's use ssl secured login with unique passwd. MAC address change in this cases will not help  :-\

==============
GCIH, Security+
<<

munkeyfreenix.batcat

User avatar

Newbie
Newbie

Posts: 11

Joined: Mon Mar 09, 2009 10:09 pm

Post Tue Mar 17, 2009 1:38 pm

Re: cracking a login wireless

i don't know much about it, but I believe Dan Kaminsky had done something with DNS and tunneling to get through those sorts of things.
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1661

Joined: Mon Jan 29, 2007 2:59 pm

Post Wed Mar 18, 2009 8:05 am

Re: cracking a login wireless

I did a test, not long ago, for a hotel chain that was using such login screens and ssl.  I used a combination of ARP spoofing / MITM (to catch the login credentials,) and then MAC spoofing and was able to gain access pretty quickly.

You simply need to take your time, and work out each piece of the puzzle, methodically, before you start hacking away, to make sure you have a good feel for how to get by each measure of security.  SSL, when used with a webpage login, is extremely vulnerable to the MITM attacks, particularly where you're dealing with either hotel visitors or hotel staff (who generally are NOT well-versed in security, and who will readily click on SSL certificate messages, without thinking.

And, as Don says, however, you ARE doing this for legit purposes, correct?
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

Kev

Sr. Member
Sr. Member

Posts: 428

Joined: Sat Sep 29, 2007 12:26 pm

Post Wed Mar 18, 2009 10:06 pm

Re: cracking a login wireless

This is one of those times when a windows tool can do the job nicely. Cain and Abel is a great tool for Mitm, arp poison routing and good ole network sniffing. I have found it does a great job testing the security for most hotel login screens.
<<

Soolari

Newbie
Newbie

Posts: 13

Joined: Thu Feb 19, 2009 10:00 pm

Post Sat Mar 28, 2009 10:32 am

Re: cracking a login wireless

Wht...about a wireless that askin 4 security before it connect how do i bypas that plz any hlp

Return to Wireless

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software