Evil Twin Access Points for Dummies or Airsnarf for Windows

Evil Twin Access Points for Dummies or Airsnarf for Windows

Postby Beetle » Mon Mar 28, 2005 2:19 pm

Because running a shell script in Linux just isn't easy enough for some folks, I put together a mini how-to on setting up a Windows XP box as a rogue AP to snarf usernames and passwords (or worse) from people at hotspots, etc.

http://airsnarf.shmoo.com/airsnarf4win.html

The basic gist is: SoftAP + TreeWalk DNS + Apache + manual local DNS cache poisoning = Airsnarf for Windows

Perhaps now the fucking reporters will stop calling "Evil Twin" access points a technique used by "sophisticated hackers".

Enjoy.

Sincerely,

Beetle
Beetle
Mini Stumbler
 
Posts: 9
Joined: Mon Jun 24, 2002 5:58 pm
Location: D.C.

Postby G8tK33per » Mon Mar 28, 2005 2:26 pm

Thanks Beetle!
"Make yourselves sheep and the wolves will eat you." ~ Benjamin Franklin

Sons of Confederate Veterans
User avatar
G8tK33per
 
Posts: 6078
Joined: Fri May 09, 2003 4:00 am
Location: Goomba's Booty Boardwalk

Postby renderman » Mon Mar 28, 2005 2:43 pm

I've smacked a few reporters around for the blatent lack of logic.

Would you call someone setting up a fake ATM an 'evil twin'? Hell no.
User avatar
renderman
 
Posts: 1867
Joined: Thu Jun 06, 2002 5:29 pm
Location: Anywhere but Utah

Postby Thorn » Tue Mar 29, 2005 6:12 am

Well done, Beetle. It is refreshing to see the IT media addressed in such a fashion.
Thorn
Stop the TSA now! Boycott the airlines.
Thorn
 
Posts: 10340
Joined: Sat Apr 13, 2002 3:00 am
Location: Villa Straylight

Postby hydro27405 » Thu Apr 14, 2005 5:52 am

I'm totally APALLED......hehe only reporter like word I know.
I have to try this on the river where I get a lot kiddie wannabe hackers trying to jump on for free.
I can see it now kiddie on boat with mom and dad, "hey look I got us free internet" everything will resolve to gay porn. Damn I can't wait.........

Hydro
hydro27405
Mini Stumbler
 
Posts: 106
Joined: Sun Dec 29, 2002 7:15 pm
Location: MN

Postby Starpoint » Thu Apr 14, 2005 6:21 am

hydro27405 wrote:I'm totally APALLED......hehe only reporter like word I know.
I have to try this on the river where I get a lot kiddie wannabe hackers trying to jump on for free.
I can see it now kiddie on boat with mom and dad, "hey look I got us free internet" everything will resolve to gay porn. Damn I can't wait.........

Hydro

Hmmm now that would be fun to set up. Have a proxy that keeps a list of approved MAC's, they get normal net access.. non listed MAC's get gay porn or they sudden get a constant stream of pop ups, each say "PLEASE PAY FOR YOUR NET ACCESS"
Against the run of the mill, static as it seems

We break the surface tension with our wild kinetic dreams
Curves and lines -- of grand designs...


Tonight's movie "Soylent Green" has been brought to you by our sponsor - Waste Management

My mind is like a Steel trap - Rusty and Illegal in most states
User avatar
Starpoint
 
Posts: 2539
Joined: Fri Apr 18, 2003 4:47 pm
Location: Houston

Postby Thorn » Thu Apr 14, 2005 6:51 am

hydro27405 wrote:I'm totally APALLED......hehe only reporter like word I know.
I have to try this on the river where I get a lot kiddie wannabe hackers trying to jump on for free.
I can see it now kiddie on boat with mom and dad, "hey look I got us free internet" everything will resolve to gay porn. Damn I can't wait.........

Hydro

Make it resolve to beastilty sites. That way Mom and Dad pay out for a couple of years worth of psych workups on Junior. :D

A "nicer" alternative would be a "Theft Detection" page You know something like "Bandwidth Theft Detected ... Reported to the FBI" and then have everything resolve to the FBI / CERT sites.
Thorn
Stop the TSA now! Boycott the airlines.
Thorn
 
Posts: 10340
Joined: Sat Apr 13, 2002 3:00 am
Location: Villa Straylight

Postby Starpoint » Thu Apr 14, 2005 7:12 am

Thorn wrote:Make it resolve to beastilty sites. That way Mom and Dad pay out for a couple of years worth of psych workups on Junior. :D

A "nicer" alternative would be a "Theft Detection" page You know something like "Bandwidth Theft Detected ... Reported to the FBI" and then have everything resolve to the FBI / CERT sites.


Or... have it load their server up with a ton of virur's, trojans, worms etc..
basically turning their PC into a oversized paperweight
Against the run of the mill, static as it seems

We break the surface tension with our wild kinetic dreams
Curves and lines -- of grand designs...


Tonight's movie "Soylent Green" has been brought to you by our sponsor - Waste Management

My mind is like a Steel trap - Rusty and Illegal in most states
User avatar
Starpoint
 
Posts: 2539
Joined: Fri Apr 18, 2003 4:47 pm
Location: Houston

Postby hydro27405 » Thu Apr 14, 2005 7:13 am

Damn I'm not gonna get any real work done this summer if I keep reading these posts, too many deas and not enough summer....oh well I'll at least have fun.

Now I need to build 2 more towers this summer so please don't give me anymore FUN stuff to do......LOL

Hydro
hydro27405
Mini Stumbler
 
Posts: 106
Joined: Sun Dec 29, 2002 7:15 pm
Location: MN

Postby beakmyn » Thu Apr 14, 2005 7:24 am

Thorn wrote:Make it resolve to beastilty sites. That way Mom and Dad pay out for a couple of years worth of psych workups on Junior. :D

A "nicer" alternative would be a "Theft Detection" page You know something like "Bandwidth Theft Detected ... Reported to the FBI" and then have everything resolve to the FBI / CERT sites.



with some scripting to grab computer name, MAC, etc... and put it on the screen.
beakmyn
 
Posts: 4858
Joined: Sun Aug 03, 2003 1:53 pm

Postby Flopik » Sun Apr 24, 2005 6:49 pm

Is there any other software for making a soft AP , because the one from pctel doesnt work with my Atheros card?
Flopik
 

Postby nevtxjustin » Mon May 23, 2005 5:14 pm

Starpoint wrote:Hmmm now that would be fun to set up. Have a proxy that keeps a list of approved MAC's, they get normal net access.. non listed MAC's get gay porn or they sudden get a constant stream of pop ups, each say "PLEASE PAY FOR YOUR NET ACCESS"


May I suggest http://www.gay.com or http://www.badpuppy.com ? <snicker>
nevtxjustin
Mini Stumbler
 
Posts: 12
Joined: Mon May 02, 2005 1:57 pm
Location: Wise County, TEXAS

Postby hydro27405 » Fri Jul 08, 2005 11:45 am

Well I've had it set up for about a month now with over 100 hits. Oh how I wish I could see mommy and daddys face when young little Johny was surfing gay porn. Hehehehehahahahahahhehehehhahaha

Hydro :D
hydro27405
Mini Stumbler
 
Posts: 106
Joined: Sun Dec 29, 2002 7:15 pm
Location: MN

Can't find SoftAP - web site gone?

Postby SilverJohn » Thu Jul 14, 2005 5:35 am

I get a 404 error. Anyone have a better link, or is this product not available?
SilverJohn
Mini Stumbler
 
Posts: 3
Joined: Thu Jul 14, 2005 5:23 am

Nevermind.

Postby SilverJohn » Thu Jul 14, 2005 5:55 am

After reading the article, I realized there is no direct link to the software. Sorry, I'm having a low-caffeine moment.
SilverJohn
Mini Stumbler
 
Posts: 3
Joined: Thu Jul 14, 2005 5:23 am

Next

Return to Windows

Who is online

Users browsing this forum: No registered users and 3 guests

cron