View
2.393
Download
0
Embed Size (px)
DESCRIPTION
Wardriving 101 by Antriksh Shah @ null Mumbai Meet, March, 2011
Citation preview
War-‐Driving
By Antriksh D Shah [email protected]
"Every evening I see the neighbor kid si3ng at the end of the driveway with his laptop for hours on end. He looks at our housefrequently and kind of freaks me out. It makes me wonder, is he hijacking our high-‐speed Internet through our wireless network?"
War-‐Driving
Wardriving is driving around a city searching for the existence of Wireless LAN Networks.
It's locaBng and logging wireless access points while in moBon.
Wardriving was invented by Peter Shipley
IntroducBon
“Wireless Ethernet”, has become very popular with Internet users looking for a cost-‐effecBve LAN that is easy to implement and provides reliable service.
The most popular is 802.11b. The 2.4Ghz range, 11Mb speed, yet poorly implements one of the most fundamental aspects of networking, the security.
This is exactly the problem with Wireless Ethernet. People can drive, walk, and share your internet access or connect to your computer.
This process is known as “Wardriving", or "LAN jacking".
What do I need to have in order to do Wardrive?
• Most people use laptops. Some use PDAs based on the PocketPC OS or Linux.
• A "stumbler" uBlity. By far the best known is Marius Milner's Network Stumbler for Windows, which most people call NetStumbler. – Linux has Kismet; – MAC OS has MacStumbler; – PocketPC has MiniStumbler.
• A Wi-‐Fi client adapter supported by your chosen stumbler uBlity. By far the best and most widely supported client adapter is Artheros adapters.
• An external antenna a\ached to your client adapter. Ideally, this is omnidirecBonal verBcally mounted on the vehicle roof. You can wardrive with nothing more than a PC card's built-‐in antenna, but these antennas are wretched and will be shielded from signals to some extent by the vehicle's metal structure. – Note well: I do think that Pringle's potato chip cans make good wardriving antennas.
• A GPS receiver that emits NMEA 183 forma\ed data. This allows the stumbler program to record where stumbled staBons are located in the physical world.
GPS: Why should I have a GPS unit?
Technically, GPS is opBonal, but the stumbled data is much less useful without GPS informaBon.
The GPS unit is used to output GPS coordinates to the computers . When you find a wireless LAN, many programs will log the exact coordinates (down to a few feet).
Legali<es and Ethics
• The legality of wardriving hasn't been tested, but few people think that wardriving itself is illegal.
• What is certainly illegal is connecBng to and using networks without the network owner's permission (which is what most people call "breaking into a network").
• To keep wardriving legal, it's important to – 1) obey the law as it exists today, and – 2) do our best to encourage journalists to draw the disBncBon between wardriving tools and their abuse by crackers.
Public percepBon is extremely important. If you connect to other people's networks illegally, it's your bu\ in a sling and nobody else's, but if you brag about it and the press picks it up, you hurt us all.
How do I stay on the right side of the law while wardriving?
1) don't examine the contents of a network; 2) don't add, delete, or change anything on the network, and 3) don't even use the network's Internet connecBon for Web surfing, email, chat, FTP, or anything else. Somebody else paid for the bandwidth, and if you don't have permission to use it, you're stealing it. Basically, unless you have permission, don't connect.
Why is wardriving useful?
• Wardriving provides a unique opportunity to gauge the growth of a technology market segment by direct inspecDon
Warchalking
• Warchalking is the drawing of symbols in public places to adverBse an open Wi-‐Fi wireless network.
• Having found a Wi-‐Fi node, the warchalker draws a special symbol on a nearby object, such as a wall, the pavement, or a lamp post.
• Those offering Wi-‐Fi service might also draw such a symbol to adverBse the availability of their Wi-‐Fi locaBon, whether commercial or personal.
Confusion with piggybacking
• Wardrivers are only out to log and collect informaBon about the wireless access points (WAPs) they find while driving, without using the networks' services.
• ConnecBng to the network and using its services without explicit authorizaBon is referred to as piggybacking.
WiFi-‐Mapping
WiFi-‐Mapping
• Many wardrivers use GPS devices to measure the locaBon of the network and log it on a to form maps of the network neighborhood. A popular web-‐based tool today is WiGLE, while one of the pioneering mapping applicaBons was StumbVerter.
• WiGLE, or Wireless Geographic Logging Engine, is a website for collecBng informaBon about the different wireless hotspots around the world. Users can register on the website and upload hotspot data like GPS coordinates, SSID, MAC address and the encrypBon type used on the hotspots discovered.
Thank You