Scan all hosts associated and notassociated and get IP's

[miroslavk]

Hello,

I was looking for answer but really didn't find valid answer


so my question is , if in my range I have few stations/laptops that are associated and some of them not associated to any AP how can I get IP's from all of them?

I know I can get MAC's if I run airodump-ng so I get MAC and see who is associated where and who is not... but I don't see their IP
same apply for filtered MAC's on AP or if there is no DHCP on the AP so you have to set manually

all tools I tried didn't work because my adapter doesn't have any IP as I want to get what ever is in the air , but even I set manually IP on my adapter still nmap and similar don't find anything.

BTW I use BT 5 r2 and ALFA 036H...


On my laptop I have firewall and IDS snort to get some info is there is someone around who trying something but as I use WiFi with Hidden SSID I still feel vulnerable when I'm there connected if there is someone smarter who can find me as my MAC will see for sure....
so if I know what type of protocol or port that scan will use I can monitor and pay attention

who feel I'm asking for bad reasons feel free not to answer
I would like to learn how to protect myself..

[aerokid240]

Can you simplify your question? Im trying my best to understand exactly what you are asking.

[bakru]

@miroslavk
if your looking for an ip adress from a client you want find any with airodump-ng.
try angry ipscannner and see if that's what you'r looking for.
regards
bakru

[bakru]

@miroslavk
if your looking for an ip adress from a client you want find any with airodump-ng.
try angry ipscannner and see if that's what you'r looking for.
regards
bakru

sorry for double posting

[miroslavk]

Sorry for confusion

I want to say if I use airodump-ng I can see Ap's and Clients MAC addresses what ever is around me, but what I want to check how can I get IP addressess from those clienets MAC's or

what is best way to scan range of devices IP's around me (as I don't know what IP ranges are there) if I don't connect to any specific AP (because if I'm connected to AP then I see IP I got, I know range I can nmap)

Thanks

[aerokid240]

Airodump will capture wifi frames from the air. For your purposes, you will definitely want to set a filter for a particular AP while capturing with airodump. If the access point is open (not encrypted) then its just a matter of stripping the wifi headers to get more meaning full information (like the IP address's per mac address). With encrypted wifi networks, you will need the wep/wpa key in order to decrypt the wifi frames to get the IPs. The tool to research for this purpose is airdecap-ng.