Just bought my LinkSys WRT54G2 - let the game begin!

[Static]

Hi dudes,

I got my new WL router for my home, or my new hack lab.

My plans:
1- Crack WEP, WPA, WPA+AES, with all variation of security settings
2- Install alternative firmwares and see if I can take some advantage to that
3- Try to crack admin password, to see how hard is it to do it
4- Try to use custom antennas to get better range (I don't know if that is possible, because this model has internal antennas)

Does anyone got this one? Tell me your experience.
Any other ideas or hints?

So let's burn!!

[KingMidas]

Which is the blue and black one with the external antennas and i think they are the dog b***ks. The only difference between this one and the older ones seems to be the casing and the antennas are now internal

You can flash these with the DD-WRT firmware and really open its potential up though it only seems to support rev 1.0. What revision is yours ?

DD-WRT :: Supported Hardware

[Static]

It only support revision 'cuz there's no version 2 yet.
Mine is v1.. DD-WRT will be on the tests =]

[imported_spectre]

just going to do dictionary on WPA and AES?

[Static]

It doesn't make too much sense for me to dictionary my own WPA2/AES password. But I was figuring out some ways to make some kind of comparison, like asking my lil brother to choose the password then try it.

Still thinking about it, accepting any kind of suggestions

[imported_vvpalin]

I have 2 of them get openwrt, or ddwrt .. both are nice.

You can wep attack it or wpa attack it. Once your in, then hydra the admin pass. You can also check out airsnarf and set up a rogue AP.

There are other things you can do as well, like setting up a ssh tunnel on it, a dns server so you can connect from hotels that block access, you can even set up a radius server.

They are pretty nifty and definitely worth the cash but i hate to say it, your going to find yourself getting bored with it after a few weeks. Regardless its still great fun and is a launching pad to the rest of your learning =]

Another thing is to do the red button mdk3 attack on it and see how long till its crashed. "just search"