22
WarDriving By Antriksh D Shah [email protected]

Wardriving 101

Embed Size (px)

DESCRIPTION

Wardriving 101 by Antriksh Shah @ null Mumbai Meet, March, 2011

Citation preview

Page 1: Wardriving 101

War-­‐Driving  

By  Antriksh  D  Shah  [email protected]  

Page 2: Wardriving 101

  "Every  evening  I  see  the  neighbor  kid  si3ng  at  the  end  of  the  driveway  with  his  laptop  for  hours  on  end.  He  looks  at  our  housefrequently  and  kind  of  freaks  me  out.  It  makes  me  wonder,  is  he  hijacking  our  high-­‐speed  Internet  through  our  wireless  network?"  

Page 3: Wardriving 101

War-­‐Driving  

Wardriving  is  driving  around  a  city  searching  for  the  existence  of  Wireless  LAN  Networks.  

It's  locaBng  and  logging  wireless  access  points  while  in  moBon.    

Wardriving  was  invented  by  Peter  Shipley  

Page 4: Wardriving 101

IntroducBon  

  “Wireless  Ethernet”,  has  become  very  popular  with  Internet  users  looking  for  a  cost-­‐effecBve  LAN    that  is  easy  to  implement  and  provides  reliable  service.    

  The  most  popular  is  802.11b.  The  2.4Ghz  range,  11Mb  speed,  yet  poorly  implements  one  of  the  most  fundamental  aspects  of  networking,  the  security.    

  This  is  exactly  the  problem  with  Wireless  Ethernet.  People  can  drive,  walk,  and  share  your  internet  access  or  connect  to  your  computer.  

      This  process  is  known  as  “Wardriving",  or                     "LAN  jacking".    

Page 5: Wardriving 101

What  do  I  need  to  have  in  order  to  do  Wardrive?  

Page 6: Wardriving 101

•  Most  people  use  laptops.  Some  use  PDAs  based  on  the  PocketPC  OS  or  Linux.    

•  A  "stumbler"  uBlity.  By  far  the  best  known  is  Marius  Milner's  Network  Stumbler  for  Windows,  which  most  people  call  NetStumbler.    – Linux  has  Kismet;    – MAC  OS  has  MacStumbler;  – PocketPC  has  MiniStumbler.    

•  A  Wi-­‐Fi  client  adapter  supported  by  your  chosen  stumbler  uBlity.  By  far  the  best  and  most  widely  supported  client  adapter  is  Artheros  adapters.    

Page 7: Wardriving 101

•  An  external  antenna  a\ached  to  your  client  adapter.  Ideally,  this  is  omnidirecBonal  verBcally  mounted  on  the  vehicle  roof.  You  can  wardrive  with  nothing  more  than  a  PC  card's  built-­‐in  antenna,  but  these  antennas  are  wretched  and  will  be  shielded  from  signals  to  some  extent  by  the  vehicle's  metal  structure.    – Note  well:  I  do  think  that  Pringle's  potato  chip  cans  make  good  wardriving  antennas.  

•   A  GPS  receiver  that  emits  NMEA  183  forma\ed  data.  This  allows  the  stumbler  program  to  record  where  stumbled  staBons  are  located  in  the  physical  world.    

Page 8: Wardriving 101

GPS:  Why  should  I  have  a  GPS  unit?  

      Technically,  GPS  is  opBonal,  but  the  stumbled  data  is  much  less  useful  without  GPS  informaBon.  

  The  GPS  unit  is  used  to  output  GPS  coordinates  to  the  computers  .  When  you  find  a  wireless  LAN,  many  programs  will  log  the  exact  coordinates  (down  to  a  few  feet).  

       

Page 9: Wardriving 101

Legali<es  and  Ethics  

Page 10: Wardriving 101

•  The  legality  of  wardriving  hasn't  been  tested,  but  few  people  think  that  wardriving  itself  is  illegal.    

• What  is  certainly  illegal  is  connecBng  to  and  using  networks  without  the  network  owner's  permission  (which  is  what  most  people  call  "breaking  into  a  network").    

Page 11: Wardriving 101

•  To  keep  wardriving  legal,  it's  important  to    – 1)  obey  the  law  as  it  exists  today,  and    – 2)  do  our  best  to  encourage  journalists  to  draw  the  disBncBon  between  wardriving  tools  and  their  abuse  by  crackers.    

      Public  percepBon  is  extremely  important.  If  you  connect  to  other  people's  networks  illegally,  it's  your  bu\  in  a  sling  and  nobody  else's,  but  if  you  brag  about  it  and  the  press  picks  it  up,  you  hurt  us  all.  

Page 12: Wardriving 101

How  do  I  stay  on  the  right  side  of  the  law  while  wardriving?    

1)  don't  examine  the  contents  of  a  network;    2)  don't  add,  delete,  or  change  anything  on  the  network,  and    3)  don't  even  use  the  network's  Internet  connecBon  for  Web  surfing,  email,  chat,  FTP,  or  anything  else.           Somebody  else  paid  for  the  bandwidth,  and  if  you  don't  have  permission  to  use  it,  you're  stealing  it.  Basically,  unless  you  have  permission,  don't  connect.    

Page 13: Wardriving 101

Why  is  wardriving  useful?  

Page 14: Wardriving 101

• Wardriving  provides  a  unique  opportunity  to  gauge  the  growth  of  a  technology  market  segment  by  direct  inspecDon  

Page 15: Wardriving 101

Warchalking  

Page 16: Wardriving 101

•   Warchalking  is  the  drawing  of  symbols  in  public  places  to  adverBse  an  open  Wi-­‐Fi  wireless  network.  

•  Having  found  a  Wi-­‐Fi  node,  the  warchalker  draws  a  special  symbol  on  a  nearby  object,  such  as  a  wall,  the  pavement,  or  a  lamp  post.    

•  Those  offering  Wi-­‐Fi  service  might  also  draw  such  a  symbol  to  adverBse  the  availability  of  their  Wi-­‐Fi  locaBon,  whether  commercial  or  personal.  

Page 17: Wardriving 101

Confusion  with  piggybacking  

Page 18: Wardriving 101

• Wardrivers  are  only  out  to  log  and  collect  informaBon  about  the  wireless  access  points  (WAPs)  they  find  while  driving,  without  using  the  networks'  services.  

•  ConnecBng  to  the  network  and  using  its  services  without  explicit  authorizaBon  is  referred  to  as  piggybacking.  

Page 19: Wardriving 101

WiFi-­‐Mapping  

Page 20: Wardriving 101

WiFi-­‐Mapping  

• Many  wardrivers  use  GPS  devices  to  measure  the  locaBon  of  the  network  and  log  it  on  a  to  form  maps  of  the  network  neighborhood.  A  popular  web-­‐based  tool  today  is  WiGLE,  while  one  of  the  pioneering  mapping  applicaBons  was  StumbVerter.  

Page 21: Wardriving 101

• WiGLE,  or  Wireless  Geographic  Logging  Engine,  is  a  website  for  collecBng  informaBon  about  the  different  wireless  hotspots  around  the  world.  Users  can  register  on  the  website  and  upload  hotspot  data  like  GPS  coordinates,  SSID,  MAC  address  and  the  encrypBon  type  used  on  the  hotspots  discovered.  

Page 22: Wardriving 101

Thank  You