(Silent illusion) Fake Gateway serious weakness in WLAN

[PaRaN0!D]

ii Guys

One Day I asked My self simple question :

all the traffic in wlan are send to specific MAC (Gateway Mac) <<<wireless router

So simply to direct all wlan traffic to my pc I have to be The gateway

you know that there is only 1 gateway mac in the wlan & if you try to change your mac to be identical to the gateway mac <<<< you can't associate or even connect to the wlan

Finally I get it :

using any virtual machine software like (virtualbox) & with any router based software like (mikrotik router software)

I can make a fake duplicate gateway in my wlan

result:

all the wlan clients associate to my fake gateway




simply I redirect all wlan traffic to my pc , with aid of (mikrotik router software) which installed on virtual machine I can respond to any authentiction type the clients request

so I got all authentication session privs.

using wireshark as sniffer I captured wep based protocol traffic & simply crack the wep in less than 1 min

So I called this attack " silent illusion" which reffer to "silent" undetectable attack and "illusion" fake gateway

foregive me for my bad english <<<<<<<< I'm from Iraq

what you think about that attck???

[hhmatt]

Very hard to read this post I don't know if you're asking or telling us. Anyways...

So I called this attack " silent illusion" which reffer to "silent" undetectable attack and "illusion" fake gateway

foregive me for my bad english <<<<<<<< I'm from Iraq

what you think about that attck???

Other people call this mitm or rogueAP. Hard to tell which one you think you're doing exactly.

What's with all the plugs for that router software btw? It should hardly matter which router you're using so why mention it?

[kernelpanic]

Hi,
congratulation about your findings,
to me it sound like a man in the middle attack, but it is a fair try.

A nice sort of re inventing the wheel ?

Regards

[PaRaN0!D]

Hi,
congratulation about your findings,
to me it sound like a man in the middle attack, but it is a fair try.

A nice sort of re inventing the wheel ?

Regards

You can call it Hardware MITM and it's diffrent from Usual MITM in:


1- It's work on new MITM protectefd WLANs

2- You don't need to poisn every client in the wlan

3- You do't need to complete the traffic routing ( you just recieve the requests & the fake router respond to complete the sessions)


The wheel is invented by ........?

[Gitsnik]

The wheel is invented by ........?

Whoever gave the writers of airbase-ng the idea

Like the others said, congratulations on figuring out the attack vector, presumably on your own, but I'm not seeing anything new here. You've just over-complicated the process by adding virtualisation layers and other routing software.

[Archangel-Amael]

Truth be told Gitsnik there are entire cultures that thrive on "over-complicating things".

@OP is there a point to this before I consider it spam and delete it? Because I still don't understand what you are trying to achieve here.

[PaRaN0!D]

Very hard to read this post I don't know if you're asking or telling us. Anyways...



Other people call this mitm or rogueAP. Hard to tell which one you think you're doing exactly.

What's with all the plugs for that router software btw? It should hardly matter which router you're using so why mention it?

Sorry for bad expression

My point from this post is to see what you think of this attack is't effective may be we can develope it?

first off all you know that MITM is difficult with new router software technologies .

Rouge AP attack is limited to the nearst clients to your position or else it fail ( using silnet illussion I can direct traffic of wlan which 15 KM to my position with only ALFA USB wireless adapter)