Hacking For Dummies by Kevin Beaver

Author:Kevin Beaver
Language: eng
Format: epub, pdf
ISBN: 9781119485513
Publisher: Wiley
Published: 2018-07-11T00:00:00+00:00

MAC spoofing

A common defense for wireless networks is MAC address controls. These controls involve configuring your APs to allow only wireless clients with known MAC addresses to connect to the network. Consequently, a common hack against wireless networks is MAC address spoofing.

The bad guys can easily spoof MAC addresses in Linux by using the ifconfig command and in Windows by using the SMAC utility, as I describe in Chapter 9. Like WEP and WPA, however, MAC address-based access controls are another layer of protection and better than nothing at all. If someone spoofs one of your MAC addresses, the only way to detect malicious behavior is through contextual awareness by spotting the same MAC address being used in two or more places on the WLAN, which can be tricky.

One simple way to determine whether an AP is using MAC address controls is to try to associate with it and obtain an IP address via DHCP. If you can get an IP address, the AP doesn’t have MAC address controls enabled.

The following steps outline how you can test your MAC address controls and demonstrate just how easy they are to circumvent:

Find an AP to attach to.

You can simply load NetStumbler, as shown in Figure 10-16.

In this test network, the AP with the SSID of doh! is the one I want to test. Note the MAC address of this AP as well. This address helps you make sure you’re looking at the right packets in the steps that follow. Although I’ve hidden most of the MAC address of this AP for the sake of privacy, suppose that its MAC address is 00:40:96:FF:FF:FF. Also notice in Figure 10-16 that NetStumbler was able to determine the IP address of the AP. Getting an IP address helps you confirm that you’re on the right wireless network.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.